Information System Security Engineer (ISSE)Omaha, NE

BuddoBot Inc.; Omaha (NE); On-site; USD 130,000 - 155,000; Full time

Job summary

Dark Wolf seeks a Senior Cybersecurity Engineer to join a collaborative team protecting secure, air-gapped enclaves with emphasis on continuous exposure management and RMF lifecycle support. You will perform advanced evaluations, develop security controls, manage ATO processes, and provide expert guidance to clients and stakeholders.

The role requires TS/SCI eligibility and US citizenship with a Top Secret clearance, plus 7+ years in cybersecurity and SSP/POAM proficiency.

Qualifications

• 7+ years of cybersecurity experience.
• 7+ years validating security controls using scanning tools, configuration reviews, and manual testing.
• 7+ years of experience employing RMF to obtain Authority to Operate (ATO).
• Proficiency in drafting and auditing SSPs and POA&Ms that explain risk to non-technical stakeholders.
• Ability to translate between developers and cybersecurity leadership.
• Experience translating technical configurations into audit-ready evidence for GRC tools like eMASS or ServiceNow.
• Hands-on with eGRC tools such as eMASS, XACTA, RSA Archer, etc.
• Ability to clearly articulate ideas for executive level consumption.
• US Citizenship with TS/SCI eligibility and SCI clearance.

Responsibilities

• Designing, testing, and implementing secure OS, networks, and security monitoring.
• Conducting risk and vulnerability assessments at network, system, and app levels.
• Leveraging RMF tools to identify compliance gaps and accelerate ATO.
• Supporting continuous exposure management and ATO workflows for real-time authorization.
• Coordinating security control implementation with admins and engineers.
• Developing and implementing security controls and risk mitigations.
• Addressing security issues across architectures, firewalls, data traffic, and access.
• Analyzing security requirements and recommending additional safeguards.
• Supporting formal Security Test & Evaluation (ST&E) for government authorities.
• Reviewing system audits and monitoring corrective actions until closure.
• Supporting cyber metrics development, maintenance and reporting.
• Providing briefings to senior staff.

Skills

Risk Management Framework

Security Controls Validation

SSP/POAM Drafting

Audit-ready Evidence

Executive Communication

Client Engagement

Incident Response & Forensics

Education

B.A./B.S. Information Security or Computer Science

Tools

eMASS

XACTA

RSA Archer

Job description

Dark Wolf is seeking a Senior Cybersecurity Engineer to join a collaborative team to develop, manage, and maintain the security posture within a series of secure, air-gapped development enclaves with a focus on continuous exposure management, RMF lifecycle management, and Authorization to Operate (ATO) support. The successful candidate will support your team and customer through advanced technical evaluations, security controls development and implementation, and comprehensive ATO management ensuring high standards of security and compliance. This position requires TS/SCI eligibility and will be based out of the Omaha, Nebraska area with a full-time on-site requirement at Offutt AFB. Responsibilities include but are not limited to:

• Designing, testing, and implementing secure operating systems, networks, security monitoring, tuning and management of IT security systems and applications, incident response, digital forensics, loss prevention, and eDiscovery actions.
• Conducting risk and vulnerability assessment at the network, system and application level.
• Leveraging AI-assisted RMF tools to ingest system documentation and post-deployment playbooks to rapidly identify compliance gaps, accelerating the ATO process.
• Supporting continuous exposure management and ATO workflows to maintain real-time system authorization.
• Coordinating proper security control implementation with system administrators and engineers.
• Developing and implementing security controls and formulating operational risk mitigations along with assisting in security awareness programs.
• Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access.
• Performing analyses to validate established security requirements and recommending additional security requirements and safeguards.
• Supporting the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
• Periodically conducting a review of each system's audits and monitoring corrective actions until all actions are closed.
• Supporting cyber metrics development, maintenance and reporting.
• Providing briefings to senior staff.

Required Qualifications

• 7+ years of relevant experience in Cybersecurity
• 7+ years of experience validating security controls within systems by utilizing scanning tools, configuration reviews, and manual testing
• 7+ years of experience utilizing the Risk Management Framework in support of obtaining a Authority to Operate
• Proficiency in drafting and auditing System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms) that clearly explain risk to non-technical stakeholders
• Ability to "translate" between the developers (who have the data) and the formal cybersecurity leadership (who needs the data).
• Experience translating technical configurations into "audit-ready" evidence for Governance, Risk, and Compliance (GRC) tools like eMASS or ServiceNow.
• Hands-on with eGRC tools like: eMASS, XACTA, RSA Archer, etc.
• Ability to clearly articulate ideas for executive level consumption
• Ability to use prior experience and knowledge to address new situations; especially during interactions with clients
• Ability to use prior experience and knowledge to seamlessly incorporate new knowledge or information during client interactions
• Must have IAT II Certification
• B.A. or B.S. Information Security, Computer Science or related discipline
• US Citizenship and Top Secret Security Clearance with SCI eligibility

This position will be an on-site based out of Omaha, NE. The salary range for this position is estimated to be between 130,000.00 - $155,000.00, commensurate on experience and technical skillset.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.