Information System Security Engineer (ISSE)

SOSi; Waipahu (HI); On-site; USD 125,000 - 168,000; Full time

Job summary

SOSi is seeking an Information System Security Engineer (ISSE) to lead cybersecurity engineering efforts supporting critical operations at Joint Base Pearl Harbor-Hickam. You will drive RMF compliance, architect secure solutions, and safeguard mission systems across the Indo-Pacific region.

This role requires collaboration with ISSOs, ISSMs, and leadership in a fast-paced environment. The position involves designing secure architectures, reviewing security controls, and guiding remediation

Qualifications

• Active Secret clearance with ability to obtain Top Secret.
• Minimum six years of cybersecurity/RMF-related experience.
• Experience with DoD A&A or RMF processes.
• Experience with eMASS and RMF packages.
• Experience implementing and assessing NIST SP 800-53 controls.
• Experience with ACAS, Tenable, Nessus, SCAP, and vulnerability management.

Responsibilities

• Design, review, and implement cybersecurity architecture for enterprise and mission systems.
• Lead RMF activities across the authorization lifecycle.
• Develop and maintain RMF documentation (SSPs, SCTMs, SARs, POA&Ms).
• Evaluate changes to determine cybersecurity impacts and authorization requirements.
• Validate implementation of NIST SP 800-53 controls and STIGs.
• Coordinate remediation with admins and engineering teams.
• Develop continuous monitoring strategies to maintain compliance.
• Support SCA assessments and Cyber readiness inspections.

Skills

RMF compliance

NIST SP 800-53

ACAS/Tenable/Nessus/SCAP

Zero Trust

Windows/Linux

DoD A&A experience

Strong communication

Education

Bachelor's degree in CS/Cybersecurity/IT

Certifications: CISSP, CCSP, CSSLP, Security+

Tools

JIRA

Confluence

ServiceNow

Job description

Information System Security Engineer (ISSE)

• Full-time
• Clearance Requirement: Secret
• Compensation: USD 124512 - USD 168091 - yearly

Founded in 1989 and headquartered in Reston, Virginia, SOSi is a private defense and government solutions business specializing in advanced technology systems and mission support. Its capabilities include data science, software development, network engineering, intelligence, surveillance, and reconnaissance (ISR), and logistics.

Defend the systems that power the Pacific mission

SOSi is seeking a talented Information System Security Engineer (ISSE) to lead cybersecurity engineering efforts supporting critical operations at Joint Base Pearl Harbor-Hickam. In this high-impact role, you'll drive RMF compliance, architect secure solutions, and help safeguard mission systems across a dynamic and evolving threat landscape. Join a collaborative cyber team where your expertise directly contributes to national security and operational readiness throughout the Indo-Pacific region.

• Design, review, and implement cybersecurity architecture and engineering solutions supporting enterprise and mission systems.
• Integrate security requirements into system design, development, testing, implementation, and sustainment activities.
• Support and lead RMF activities throughout the authorization lifecycle, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop, review, and maintain RMF documentation including System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms).
• Evaluate system changes, upgrades, and new capabilities to determine cybersecurity impacts and authorization requirements.
• Validate implementation of NIST SP 800-53 security controls and DISA Security Technical Implementation Guides (STIGs).
• Conduct cybersecurity architecture reviews, security engineering analyses, and technical risk assessments.
• Analyze ACAS, Tenable, Nessus, and SCAP assessment results and coordinate remediation efforts with system administrators and engineering teams.
• Develop and implement continuous monitoring strategies to maintain cybersecurity compliance and authorization status.
• Participate in Configuration Control Boards (CCBs), Technical Review Boards (TRBs), and engineering working groups.
• Provide technical guidance and cybersecurity recommendations to system owners, ISSOs, ISSMs, and senior leadership.
• Support cybersecurity inspections, Security Control Assessor (SCA) assessments, and Command Cyber Readiness Inspections.
• Evaluate interconnections, data flows, and system architectures to identify security risks and recommend mitigations.
• Track vulnerability remediation efforts and maintain POA&M activities to meet organizational and regulatory requirements.
• Support implementation and adoption of Zero Trust principles and cybersecurity modernization initiatives.
• Prepare technical reports, executive summaries, and briefing materials for leadership decision-making.
• Active Secret clearance with the ability to obtain and maintain a Top-Secret clearance.
• Must meet DoD 8140 qualification requirements for DCWF 652 Security Architect Intermediate (Primary)
• Bachelors Degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering // OR // GMON, SecurityX, CCSP, CISSO, Cloud+, CSSLP, FITSP-D, GCSA, or GSEC.
• DCWF 461 Systems Security Analyst Intermediate (Secondary)
• Bachelors Degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering // OR // CCSP, Cloud+, GICSP, GISF, GSEC, or Security+.
• Six (6) years of experience supporting cybersecurity, information assurance, systems engineering, or RMF-related activities.
• Experience supporting DoD Assessment and Authorization (A&A) or RMF processes.
• Experience with eMASS and maintenance of RMF authorization packages.
• Experience implementing and assessing NIST SP 800-53 security controls.
• Experience with ACAS, Tenable Security Center, Nessus, SCAP, and vulnerability management processes.
• Working knowledge of Windows, Linux, networking, virtualization, and enterprise information systems.
• Strong communication skills with the ability to engage both technical and non-technical stakeholders.

Preferred Qualifications:

• Active Top Secret clearance with SCI eligibility.
• CISSP certification.
• CISSP-ISSEP, CCSP, CGRC, SecurityX (formerly CASP+), or CSSLP certification.
• Experience supporting Combatant Command, Navy, or Joint operational environments.
• Experience with Zero Trust Architecture implementation.
• Knowledge of Cross Domain Solutions (CDS) and Commercial Solutions for Classified (CSfC).
• Experience with cloud security technologies and hybrid cloud environments.
• Experience conducting cybersecurity architecture reviews and secure design assessments.
• Experience using JIRA, Confluence, ServiceNow, or similar collaboration and workflow platforms.
• Experience supporting Security Control Assessor reviews and ATO renewals.

• Working conditions are normal for an office environment.
• Fast paced, deadline-oriented environment.
• May require periods of non-traditional working hours including consecutive nights or weekends.

Working at SOSi:

All interested individuals will receive consideration and will not be discriminated against for any reason.

NOTE: This posting previously included a line about leaving the site and third-party terms; that instruction has been removed to comply with formatting standards.