Information Systems Security Engineer; ISSE RMF

Information Systems Security Engineer (ISSE) – RMF - #:

JR-

Full Time

Job Description:

New Directions Technologies, Inc. (NDTI) is seeking an experienced Information Systems Security Engineer (ISSE) to join our cybersecurity team supporting the Naval Surface Warfare Center, Port Hueneme Division (NSWC PHD).

The ISSE will provide cybersecurity engineering and Risk Management Framework (RMF) Assessment and Authorization (A&A) support for Navy information systems. This position is responsible for developing and maintaining authorization packages in the Enterprise Mission Assurance Support Service (eMASS), evaluating security-control implementation, analyzing vulnerability and compliance results, and supporting systems through initial authorization, reauthorization, and continuous monitoring.

The successful candidate will collaborate with system owners, cybersecurity personnel, system administrators, developers, Security Control Assessors, and other stakeholders to identify cybersecurity risks, document compliance, remediate deficiencies, and obtain or maintain system authorization.

Other responsibilities include:

• Develop, update, and maintain complete RMF authorization packages in eMASS, including system security plans, control implementation statements, assessment documentation, supporting artifacts, POA&Ms, and authorization decision materials.
• Support all phases of the RMF lifecycle, including initial ATOs, reauthorizations, annual reviews, system changes, and continuous monitoring, in accordance with DoDI 8500.01, DoDI 8510.01, applicable NIST publications, Department of the Navy guidance, and local cybersecurity requirements.
• Evaluate technical and nontechnical security controls; conduct cybersecurity testing and assessment activities; analyze vulnerability and compliance results from ACAS, SCAP Compliance Checker, DISA STIGs, Security Readiness Review scripts, VRAM, and related tools; and document findings and supporting evidence.
• Develop and track POA&Ms, coordinate remediation activities with technical teams, validate corrective actions, and document approved mitigations, exceptions, residual risks, and closure evidence for identified deficiencies.
• Provide cybersecurity engineering and system-hardening guidance for applications, networks, databases, cloud services, and supporting infrastructure to ensure security requirements are incorporated throughout the system lifecycle.
• Coordinate RMF activities with system owners, cybersecurity personnel, administrators, developers, assessors, and Authorizing Official representatives while preparing technical reports, risk summaries, status briefings, and other documentation for government leadership.

ECraft ISSM1

Education and Work Experience Requirements:

Due to customer requirements, U.S Citizenship is required.

Must be able to obtain and maintain a DoW Security Clearance for duration of employment.

Associate Degree from accredited University or CNSSI 4011 Certificate or successful completion of military training course: CIN J-3B-0440 (IP BASIC) (or DOD Service equivalent).

A CompTIA Security + (CE) certification is required.

Validated 1-3 years specialized entry level experience in Specialty Area 72 (Information Systems Security Management)

As a member of Cybersecurity Workforce individual will need to maintain a minimum of 40 continuing education hours per year.

OJT Evaluation consist of: NAVEDTRA 43462-1C, or NAVEDTRA 43462-2, or NAVEDTRA 43469 watch station 304 or If IP O1-3 or NAVEDTRA 43360-2 or If IP O4-5 or NAVEDTRA 43360-3 and must be completed in directed timelines.

Salary: the expected pay range for this position is $74,880 to $95,680 but is subject to change.