Cybersecurity Engineer II - RMF & A&A Expert

Information Systems Solutions, Inc.; Charleston (SC); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Fully vested 401(k) matching program

Coverage of family medical deductibles

Spot bonuses

Educational assistance

Job summary

Information Systems Solutions, Inc. seeks a Cybersecurity Engineer II to join our team and support RMF processes across the lifecycle. You will prepare SSPs, POA&Ms, and security plans; analyze risks; coordinate with ISSOs, assessors, and leadership to address findings.

Occasional travel to onsite locations, including Antarctica, may be required as part of program support. The ideal candidate has 5+ years of experience with RMF, NIST, and compliance activities, and can communicate risk clearly

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Electrical or Electronics Engineering.
• Five or more years of experience with RMF, NIST, A&A documentation, SSPs, POA&Ms, security analyses and control traceability.
• Experience with continuous monitoring, audits, and regulatory requirements.
• IAT Level II certification or equivalent highly preferred.

Responsibilities

• Support the Risk Management Framework process across the system lifecycle.
• Prepare, update, and maintain authorization documentation, including System Security Plans, Standard Operating Procedures, Policies, and Plans of Action and Milestones.
• Conduct Security Impact Analysis by identifying control gaps, security risks, and compliance issues, then recommend remediation actions.
• Coordinate with system owners, engineers, ISSOs, assessors, and leadership to collect evidence and resolve findings.
• Track remediation activities and validate closure of security weaknesses.
• Support continuous monitoring activities, including control reviews, status reporting, and periodic updates.
• Review vulnerability scan results and help align remediation efforts with compliance requirements.
• Ensure systems meet applicable regulatory, contractual, and organizational security standards.
• Assist with audit preparation, responses to assessors, and recurring compliance reviews.
• Communicate risk posture, assessment results, and recommendations to stakeholders in clear business and technical terms.

Skills

RMF knowledge

NIST requirements

Security controls

Vulnerability management

A&A documentation

SSP/POA&M

ACAS

STIGs

GRC platforms

Stakeholder communication

Education

Bachelor’s degree in Cybersecurity/CS/Engineering

IAT Level II certification

Tools

ACAS

eMASS

Job description

Information Systems Solutions, Inc. seeks a Cybersecurity Engineer II to join our team and support RMF processes across the lifecycle. You will prepare SSPs, POA&Ms, and security plans; analyze risks; coordinate with ISSOs, assessors, and leadership to address findings.

Occasional travel to onsite locations, including Antarctica, may be required as part of program support. The ideal candidate has 5+ years of experience with RMF, NIST, and compliance activities, and can communicate risk clearly