Information Systems Security Engineer

redriver; United States; On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Excellent benefits

Competitive salary

Exceptional work environment

Job summary

Red River seeks a highly technical Information Systems Security Engineer (ISSE) to support a U.S. Navy program through RMF, ATO, system hardening, and vulnerability remediation.

This hands-on role centers on Linux servers, virtualization, and network infrastructure to implement and validate security controls. The successful candidate will work with system admins and cybersecurity personnel to address security gaps and deliver practical technical solutions that meet Navy RMF/ATO requirements.

Qualifications

• Bachelor's degree in cybersecurity, CS, IT, engineering, or related field.
• 7+ years hands-on cybersecurity, systems engineering, network engineering, or information assurance.
• Experience supporting RMF and ATO activities within a DoD environment.
• Strong hands-on experience with RHEL/Linux administration and security hardening.
• Hands-on experience with VMware environments; Cisco ACI and Catalyst.

Responsibilities

• Perform hands-on security engineering in support of Navy RMF and ATO requirements.
• Implement and validate technical security controls across servers, virtualization, network, and logging environments.
• Harden systems in accordance with DISA STIGs, Navy security requirements, and RMF control requirements.
• Perform vulnerability remediation, including analysis of findings, root‐cause identification, remediation, and validation.
• Configure, secure, troubleshoot, and validate RHEL/Linux systems.
• Support security hardening and troubleshooting of VMware environments.
• Perform security configuration and troubleshooting of Cisco Catalyst and Cisco ACI infrastructure.
• Support centralized security logging and monitoring using Splunk and Cribl.
• Analyze system and security logs to troubleshoot issues and validate security requirements.
• Support collection and validation of technical evidence required for RMF/ATO activities.
• Translate RMF security requirements into practical technical implementations.
• Work directly with infrastructure teams to remediate security deficiencies.
• Automate repetitive security engineering and validation tasks where appropriate.

Skills

Linux administration

Troubleshooting

Security engineering

RMF/ATO experience

Vulnerability remediation

Education

Bachelor's degree in cybersecurity, CS, IT, engineering, or related field

Tools

VMware

Cisco ACI

Cisco Catalyst

Splunk

Cribl

Tenable/Nessus

DISA STIGs

Job description

We are seeking a highly technical Information Systems Security Engineer (ISSE) to support a U.S. Navy program through the Risk Management Framework (RMF), Authority to Operate (ATO), system hardening, vulnerability remediation, and day-to-day security engineering activities.

This is a hands‑on engineering position. The ideal candidate is comfortable working directly on Linux servers, virtualization infrastructure, network infrastructure, and security monitoring platforms to implement, troubleshoot, validate, and maintain security controls.

The successful candidate will work closely with system administrators, network engineers, and cybersecurity personnel to identify security gaps and implement practical technical solutions that satisfy Navy RMF/ATO requirements.

This position is not primarily focused on strategy, program planning, configuration management, or developing project/VM plans. The focus is on technical execution and engineering.

Responsibilities

• Perform hands‑on security engineering in support of Navy RMF and ATO requirements.
• Implement and validate technical security controls across servers, virtualization, network, and logging environments.
• Harden systems in accordance with applicable DISA STIGs, Navy security requirements, and RMF control requirements.
• Perform vulnerability remediation, including analysis of findings, root‑cause identification, remediation, and validation.
• Configure, secure, troubleshoot, and validate RHEL/Linux systems.
• Support security hardening and troubleshooting of VMware environments.
• Perform security configuration and troubleshooting of Cisco Catalyst and Cisco ACI infrastructure.
• Support centralized security logging and monitoring using Splunk and Cribl.
• Analyze system and security logs to troubleshoot issues and validate security requirements.
• Support collection and validation of technical evidence required for RMF/ATO activities.
• Translate RMF security requirements into practical technical implementations.
• Work directly with infrastructure teams to remediate security deficiencies.
• Automate repetitive security engineering and validation tasks where appropriate.

Required Qualifications

• Bachelor's degree in cybersecurity, computer science, information technology, engineering, or a related technical field, or equivalent professional experience.
• 7+ years of hands‑on experience in cybersecurity, systems engineering, network engineering, or information assurance.
• Demonstrated experience supporting RMF and ATO activities within a DoD environment.
• Strong hands‑on experience with RHEL/Linux administration and security hardening.
• Experience implementing and validating DISA STIG requirements.
• Hands‑on experience with VMware environments.
• Hands‑on experience with Cisco Catalyst switching and Cisco ACI.
• Hands‑on experience with Splunk and Cribl or comparable enterprise logging technologies.
• Strong understanding of vulnerability scanning, remediation, and security validation.
• Strong Linux command‑line and troubleshooting skills.
• Ability to troubleshoot complex infrastructure and security issues across operating‑system, virtualization, network, and logging layers.

Desired Qualifications

• Experience supporting U.S. Navy or DoD mission systems.
• Experience with Navy RMF processes and ATO assessments.
• Experience with eMASS.
• Experience interpreting and implementing DISA STIGs across multiple technology platforms.
• Experience with Tenable/Nessus or comparable vulnerability‑scanning platforms.
• Experience with PowerShell, Bash, Python, or other scripting languages used for security automation.
• Experience troubleshooting authentication, access control, auditing, encryption, and system logging requirements.
• Experience integrating infrastructure logs into Splunk through Cribl.
• Experience with SCAP/STIG compliance tooling.

Security Clearance

• Active DoD Secret clearance required.
• Ability to obtain and maintain any additional program‑specific access requirements.

Certifications

One or more of the following is preferred:

• Security+
• CISSP
• CySA+
• Linux‑related certification
• VMware certification
• Cisco certification

Basic Qualifications

U.S. Citizenship Required

Red River offers a competitive salary, excellent benefits and an exceptional work environment.

You can review our benefit offerings here.

EOE M/F/DISABLED/Vet

Red River is an equal opportunity employer. All qualified applicants will receive consideration for employment. Discrimination or harassment based upon any protected characteristics as defined by state or federal law is wholly inconsistent with our company values and will not be tolerated.

In order to ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Veterans Readjustment Act of 1974, and Title I of the American's with Disabilities Act of 1990, applicants that require accommodation in the job application process m