Information System Security Engineer, (ISSE)

SCALIS; Geraghty Village (MD); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health Insurance

Vision Insurance

401(k) Matching

Paid Time Off (PTO)

Paid Holidays

Life Insurance

Education Reimbursement

Job summary

Cinteot is seeking an Information Systems Security Engineer (ISSE) to support RMF accreditation and security assessments in Fort Meade, MD. You will work on conducting risk-based evaluations and provide mitigation strategies for IA standards.

The role requires DoD 8570 baseline certification, 7+ years in cybersecurity, and experience with DISA STIGs, ACAS/HBSS, and eMASS. On-site position with comprehensive benefits.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• DoD 8140.03 / 8570.01-M baseline certification (e.g., Security+, CISSP, CISM) as required.
• 7+ years in cybersecurity engineering, RMF/DIACAP accreditation, and DoD compliance documentation.

Responsibilities

• Facilitate RMF accreditation life cycle for sub-projects.
• Support periodic system security scans as required by RMF policy.
• Validate system security requirement definitions and analyze designs.
• Perform security assessments to identify vulnerabilities and propose mitigations.
• Review network diagrams and VPN termination points; assess TLS security.

Skills

RMF/DIACAP accreditation experience

Technical security assessments

Strong written/verbal communication

Education

Bachelor's degree in Cybersecurity/IT or related field

Tools

DISA STIGs/SRGs

ACAS/HBSS

eMASS package preparation

Job description

Information System Security Engineer, (ISSE)

Cinteot

9 days ago

On-Site

Full Time

Intermediate or Experienced

Fort Meade, Maryland, United States

About Cinteot

Cinteot Inc. is a small IT services company that specializes in cybersecurity, Big Data/databases, software development, systems testing, STIG Compliance training, closed-circuit television/security cameras and access controls, and construction/facilities.

We are a Woman-owned, SBA Certified 8(a), and HUBZone company.

About the job

As an Information Systems Security Engineer (ISSE), you'll:

• Facilitate sub-projects as they go through the Risk Management Framework (RMF) accreditation life cycle.
• Support the periodic system security scans as required by policy and the RMF.
• Validate and verify system security requirement definitions and analyze system security designs.
• Perform technical security assessments of computing environments to identify points of vulnerability, and then recommend mitigation strategies for those that do not comply with established Information Assurance (IA) standards.
• Experience manually reviewing network diagrams, network device configurations, termination points for VPNs, and a working knowledge of software TLS security.
• Able to maintain a flexible and non-traditional RMF review of secure networks to assess and prescribe countermeasures for secure communications e.g. analog radio, mobile cellular, remote kits, software/hardware-based VPN solutions and VDI technologies.
• Familiar with applying different standards and security frameworks to include CIS benchmarks, FIPS 140-2, DISA Stigs, CNSA cryptographic suite compliance, etc.
• Participated as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments.
• Participated as a security engineering representative on engineering teams for the design, development, implementation and/or integration of IA architectures, systems, or system components.
• Supported the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
• Applied knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments
• Supported security planning, assessment, risk analysis, and risk management.
• Identified overall security requirements for the proper handling of Government data.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• Must hold and maintain an appropriate DoD 8140.03 / 8570.01-M certification baseline for this labor category (e.g., Security+, CISSP, CISM, or equivalent as required).
• At least 7 years of experience in cybersecurity engineering, RMF/DIACAP accreditation, and compliance documentation in DoD environments.
• Expertise in the application of DISA STIGs/SRGs, ACAS/HBSS vulnerability analysis, and eMASS package preparation.
• Strong written and verbal communication skills, with demonstrated experience producing accreditation documentation and presenting risk findings to senior stakeholders.

Desired Qualifications

• Master's degree in Cybersecurity or related discipline.
• Experience supporting DISA programs and preparing for CCRI inspections.
• Advanced certifications such as CISSP-ISSAP or CISM.

Clearance Requirement

Active Top Secret clearance

Benefits

• Health Insurance
• Vision Insurance
• 401(k) Matching
• Paid Time Off (PTO)
• Paid Holidays
• Life Insurance
• Birthday PTO
• Education Reimbursement
• Complete Insurance Coverage
• 401k with Company Contribution
• Tuition Reimbursement
• Generous Paid Time Off (including your birthday!)

Cinteot is an Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.