Cybersecurity Engineer II

Socket.dev; Charleston (SC); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Fully vested 401(k) matching

Family medical deductibles covered

Spot bonuses

Educational assistance

Job summary

Information Systems Solutions, Inc. is seeking a Cybersecurity Engineer II to join our growing team. You will provide cyber services, support RMF processes, and maintain security documentation across programs. You will work with system owners, ISSOs, and assessors to close findings and ensure compliance.

The role emphasizes risk-based decision making, remediation tracking, and communication of risk posture to stakeholders. A strong background in RMF and A&A artifacts is essential.

Qualifications

• Experience with RMF and relevant NIST requirements.
• Ability to develop and maintain SSPs, POA&Ms, and security documentation.
• Familiarity with continuous monitoring and governance processes.

Responsibilities

• Support RMF processes across system lifecycles.
• Prepare and maintain authorization documentation (SSP, POA&M).
• Conduct security impact analyses and identify risks.
• Coordinate with owners, ISSOs, assessors, and leadership.
• Track remediation activities and verify closure.
• Assist with audits and compliance reviews.

Skills

RMF knowledge

NIST standards

A&A documentation

SSP/POA&M

Vulnerability management

ACAS

GRC platforms

Education

Bachelor's degree in Cybersecurity

Tools

ACAS

eMASS

GRC platforms

Job description

Information Systems Solutions, Inc, has an immediate opening for a Cybersecurity Engineer II to join our rapidly growing team. The Cybersecurity Engineer II will provide cyber services and solutions, technical support, and management support for ATC Division Programs (NPP).

Traveling to onsite locations in Antarctica is possible.

Specific duties include, but are not limited to the following:

• Support the Risk Management Framework process across the system lifecycle.
• Prepare, update, and maintain authorization documentation, including System Security Plans, Standard Operating Procedures, Policies, and Plans of Action and Milestones.
• Conduct Security Impact Analysis by identifying control gaps, security risks, and compliance issues, then recommend remediation actions.
• Coordinate with system owners, engineers, ISSOs, assessors, and leadership to collect evidence and resolve findings.
• Track remediation activities and validate closure of security weaknesses.
• Support continuous monitoring activities, including control reviews, status reporting, and periodic updates.
• Review vulnerability scan results and help align remediation efforts with compliance requirements.
• Ensure systems meet applicable regulatory, contractual, and organizational security standards.
• Assist with audit preparation, responses to assessors, and recurring compliance reviews.
• Communicate risk posture, assessment results, and recommendations to stakeholders in clear business and technical terms.

Why Work For ISS?

At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career.

• fully vested 401(k) matching program
• coverage of family medical deductibles
• spot bonuses
• educational assistance to further your career

Requirements

Clearance Level Secret

Certifications (IAT Level II)

• Security+ CE
• GIAC Security Essentials Certification (GSEC)
• Security Certified Network Professional (SCNP)
• System Security Certified Practitioner (SSCP)
• SecurityX or CISSP (highly preferred)

Education

• Bachelor's degree in Cybersecurity, Computer Science, Electrical or Electronics Engineering

Required Skills

• Five (5) years or more of experience, to include:

  A strong working knowledge of the Risk Management Framework (RMF), including relevant NIST requirements, and demonstrated experience developing and maintaining Assessment and Authorization (A&A) documentation. This includes System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Impact Analyses, and control traceability artifacts.

  The role requires solid familiarity with continuous monitoring, security assessment processes, authorization lifecycle activities, Governance Risk and Compliance (GRC) platforms, vulnerability management, security scanning tools (such as ACAS), regulatory requirements, secure configuration baselines, Security Technical Implementation Guides (STIGs), and remediation tracking.

  Candidates must also be able to evaluate technical implementations and effectively align security controls with operational, technical, and management requirements.

Desired Skills

• ACAS, eMASS or equivalent certification