Cybersecurity Engineer III with Security Clearance

Information Systems Solutions, Inc.; San Diego (CA); On-site; USD 140,000 - 150,000; Full time

Benefits offered by this job

401(k) matching program

Educational assistance

Job summary

Information Systems Solutions, Inc. is seeking a Cybersecurity Engineer III to support NIWC PAC IT management services. The role emphasizes A&A accreditation work, monitoring operations, incident triage, vulnerability remediation, and RMF expertise.

It is 100% onsite and requires Secret clearance. Ideal candidates will have extensive experience in A&A, SSP/SAP/SAR documentation, and operating within security controls tailoring frameworks.

Qualifications

• Experience in cybersecurity monitoring and incident response.
• Understanding of risk management framework (RMF) and A&A processes.
• Ability to develop and implement security controls and remediation strategies.

Responsibilities

• Support A&A accreditation efforts and maintain cybersecurity monitoring operations.
• Triage incidents to assess scope and impact and identify vulnerabilities.
• Develop SSP, SAP, SARs and other required A&A documentation.
• Maintain DISA circuit connections and accreditation workflow schedules.
• Collaborate with teams to ensure compliance with RMF and security controls.

Skills

Cybersecurity monitoring

Incident response

Data analytics & risk assessment

Job description

Duties Cybersecurity Engineer III INFORMATION SYSTEMS SOLUTIONS, INC Cybersecurity Engineer III Information Systems Solutions (ISS) is seeking a Cybersecurity Engineer III to support the NIWC PAC Information Technology Management Support Services contract. The Cybersecurity Engineer III will be responsible for supporting Assessment and Authorization (A&A) accreditation efforts. This role maintains cybersecurity monitoring operations, performs triage to assess the scope and impact of incidents, identifies vulnerabilities, and recommends remediation strategies. The role requires in-depth knowledge of the Risk Management Framework. This position is 100% onsite Specific duties include, but are not limited to the following:

• Test and apply security controls based on security categorization, the application of overlays (privacy, classified, intel, etc.) and security control tailoring (AI, NOFORN, etc.).
• Conduct active and passive reconnaissance of data, with the ability to assess and author Plans of Milestones and Actions (POA&Ms) containing accurate and verifiable mitigation statements, milestone tracking, and applying to the most relevant security control.
• Development of comprehensive required A&A documentation, including System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Reports (SARs), etc.
• Adherence to the eMASS scheduled tasking within the accreditation cycle, including Quarterly Independent Verification and Validation (IV&V), quarterly STIG checks, Annual Security Review (ASR), monthly POA&M updates, and resubmission for ATO, ATC, IATC and IATT as applicable.
• Maintenance of DISA circuit connections (CCSDs), inheritance from accredited systems and cloud service providers, and the workflow schedule on accreditations. Why Work For ISS? At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career. Requirements Clearance Level: Secret Certification IAT III

Duties Cybersecurity Engineer III INFORMATION SYSTEMS SOLUTIONS, INC Cybersecurity Engineer III Information Systems Solutions (ISS) is seeking a Cybersecurity Engineer III to support the NIWC PAC Information Technology Management Support Services contract. The Cybersecurity Engineer III will be responsible for supporting Assessment and Authorization (A&A) accreditation efforts. This role maintains cybersecurity monitoring operations, performs triage to assess the scope and impact of incidents, identifies vulnerabilities, and recommend remediation strategies. The role requires in-depth knowledge of the Risk Management Framework. This position is 100% onsite Specific duties include, but are not limited to the following:

• Test and apply security controls based on security categorization, the application of overlays (privacy, classified, intel, etc.) and security control tailoring (AI, NOFORN, etc.).
• Conduct active and passive reconnaissance of data, with the ability to assess and author Plans of Milestones and Actions (POA&Ms) containing accurate and verifiable mitigation statements, milestone tracking, and applying to the most relevant security control.
• Development of comprehensive required A&A documentation, including System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Reports (SARs), etc.
• Adherence to the eMASS scheduled tasking within the accreditation cycle, including Quarterly Independent Verification and Validation (IV&V), quarterly STIG checks, Annual Security Review (ASR), monthly POA&M updates, and resubmission for ATO, ATC, IATC and IATT as applicable.
• Maintenance of DISA circuit connections (CCSDs), inheritance from accredited systems and cloud service providers, and the workflow schedule on accreditations. Why Work For ISS? At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career. Requirements Clearance Level: Secret Certification IAT III

One of the following:

• CASP+ CCNP Security
• CISA
• CISSP (or Associate)
• GCED
• GCIH

• 10+ years of experience in cybersecurity or incident response
• Certifications preferred: Certified Information Systems Security Professional (CISSP) Skills & Competencies:
• Cybersecurity Monitoring and Incident Response
• Security Testing, Auditing, and Remediation
• Data Analytics and Risk Assessment Salary Description 140,000-150,000