Information Systems Security Engineer

Darkwolfsolutions; Colorado Springs (CO); On-site; USD 135,000 - 155,000; Full time

Job summary

Dark Wolf is seeking an Information Systems Security Engineer (ISSE) to support RMF processes and A&A packages for GMASS, mainly on-site in Colorado Springs with some remote opportunities. The role requires US citizenship and a Top Secret/SCI-eligible clearance, along with DoD RMF experience and SIEM expertise.

Responsibilities include building security architectures, developing DoD cyber requirements, performing vulnerability assessments, and maintaining RMF artifacts while ensuring compliance

Qualifications

• 9+ years of experience with LogRhythm SIEM.
• CompTIA Security+ or equivalent IAT Level II DoD 8570 certification.
• Experience as an RMF Engineer, ISSM/ISSO, Security Controls Validator, and/or information assurance engineer.
• 6+ years Cybersecurity compliance experience.
• 6+ years of ATO accreditation experience.
• ACAS experience (Nessus / Tenable Security Center).
• Experience with Nessus/Tenable Security Center, STIG Viewer, and EvaluateSTIG for RMF assessments and compliance audits.
• Ability to clearly articulate ideas for executive level consumption.
• BA or BS in Information Security, Computer Science or related discipline.
• US Citizenship and have Secret security clearance with eligibility to the Top Secret/SCI level

Responsibilities

• Build security architectures, integrate new architectural features into existing infrastructures, design cybersecurity architectural artifacts, and provide engineering recommendations to resolve integration and testing issues.
• Develop cyber requirements to DoD 8570/8140 standards.
• Perform vulnerability assessments and compliance audits, triage and prioritize findings, design remediation solutions, and apply fixes (configuration changes, system hardening, patching) to bring systems into compliance with RMF controls and enclave policy
• Assess RMF artifacts and identify deviations from RMF control requirements.
• Establish program control processes covering certification testing, compliance documentation, investigations, software research, hardware introduction and release, inspections, and periodic audits to support system assessment and authorization.

Skills

LogRhythm SIEM

Executive communication

RMF engineering

Information assurance

Education

Bachelor's degree in Information Security or Computer Science

Tools

ACAS (Nessus / Tenable Security Center)

Nessus/Tenable Security Center

STIG Viewer

EvaluateSTIG

Job description

Dark Wolf is seeking an Information Systems Security Engineer (ISSE) to support a collaborative team to develop, manage, and maintain information system security Assessment and Authorization (A&A) packages for the US Space Force GBR Maintenance and Sustainment Services (GMASS). This role supports the constellation of radar technology that protects our nation from ballistic missile attacks launched by adversarial governments. This could include supporting the planning, executing, and monitoring of the seven step RMF process for our customer. This position will be primarily on-site in Colorado Springs, CO with remote opportunities. Candidates must be located physically in Colorado Springs or the surrounding areas.

Key Responsibilities:

• Build security architectures, integrate new architectural features into existing infrastructures, design cybersecurity architectural artifacts, and provide engineering recommendations to resolve integration and testing issues.
• Develop cyber requirements to DoD 8570/8140 standards.
• Perform vulnerability assessments and compliance audits, triage and prioritize findings, design remediation solutions, and apply fixes (configuration changes, system hardening, patching) to bring systems into compliance with RMF controls and enclave policy
• Assess RMF artifacts and identify deviations from RMF control requirements.
• Establish program control processes covering certification testing, compliance documentation, investigations, software research, hardware introduction and release, inspections, and periodic audits to support system assessment and authorization.

Required Qualifications:

• 9+ years of relevant experience with LogRhythm SIEM
• CompTIA Security+ or equivalent IAT Level II DoD 8570 certification.
• Experience as an RMF Engineer, ISSM/ISSO, Security Controls Validator, and/or information assurance engineer
• 6+ years Cybersecurity compliance experience
• 6+ years of ATO accreditation experience
• ACAS experience (Nessus / Tenable Security Center).
• Experience with Nessus/Tenable Security Center, STIG Viewer, and EvaluateSTIG for RMF assessments and compliance audits.
• Ability to clearly articulate ideas for executive level consumption
• Ability to use prior experience and knowledge to address new situations; especially during interactions with clients
• Ability to use prior experience and knowledge to seamlessly incorporate new knowledge or information during client interactions
• B.A. or B.S. Information Security, Computer Science or related discipline
• US Citizenship and have Secret security clearance with eligibility to the Top Secret/SCI level

Desired Qualifications:

• Previous experience supporting Department of Defense RMF processes
• RHEL system administration and hardening experience in an on-premises environment.
• Scripting experience to support remediation and configuration tasks (e.g., Bash, Python).
• Experience supporting assessment and authorization (A&A) of DoW systems.
• Experience with enclave and network security within classified environments.

This position is located in Colorado Springs, CO. The estimated salary range for this position is $135,000.00 - $155,000.00, commensurate on experience and technical skillset.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.