Cybersecurity ISSE: DoD RMF & FRCS Expert

EIGENNET LLC; United States; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

On-site work

Job summary

EIGENNET LLC is seeking an Information Systems Security Engineer (ISSE) to support NAVFAC Marianas CIO3 Office on-site in Guam. You will perform RMF-based cybersecurity engineering for Facility-Related Control Systems, ensuring confidentiality, integrity, and availability of government networks and data.

The role requires DoN/DoD RMF experience, NIST SP 800-53 controls, eMASS management, vulnerability assessments, and STIG/SRG compliance across FRCS environments.

Qualifications

• Experience supporting DoN/DoD cybersecurity environments with RMF, NIST SP 800-53 and eMASS.
• Ability to develop and maintain RMF artifacts, SSPs, and related documentation.
• Proficient with vulnerability management and STIG/SRG compliance.

Responsibilities

• Execute RMF lifecycle activities (Steps 1-6) per DoN/DoD NAVFAC guidance.
• Review and validate system inventories, security documentation, and authorization artifacts.
• Support ATO activities, package maintenance, and annual security reviews.
• Develop cybersecurity documentation including SSPs, policies, SOPs, and plans.
• Apply NIST SP 800-53 controls and tailor requirements for FRCS environments.
• Develop and execute vulnerability management strategies using DoD/Navy processes.
• Perform vulnerability assessments with ACAS/Nessus, SCAP, and related tools.
• Validate STIG/SRG compliance using .ckl and .cklb formats.
• Generate cybersecurity assessment reports and maintain vulnerability documentation.

Skills

RMF lifecycle

NIST SP 800-53

eMASS

STIG

POA&M

CCB

CERT

ACAS/Nessus

SCAP

Security Center

VRAM

Tools

ACAS/Nessus

SCAP

Security Center

VRAM

Job description

EIGENNET LLC is seeking an Information Systems Security Engineer (ISSE) to support NAVFAC Marianas CIO3 Office on-site in Guam. You will perform RMF-based cybersecurity engineering for Facility-Related Control Systems, ensuring confidentiality, integrity, and availability of government networks and data.

The role requires DoN/DoD RMF experience, NIST SP 800-53 controls, eMASS management, vulnerability assessments, and STIG/SRG compliance across FRCS environments.