Information Systems Security Engineer

Red River; Virginia (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

Red River is seeking a highly technical Information Systems Security Engineer (ISSE) to support a U.S. Navy program through RMF and ATO, system hardening, vulnerability remediation, and day-to-day security engineering.

This hands-on role focuses on Linux servers, virtualization, networks, and security monitoring to implement, troubleshoot, and maintain security controls. You'll work with system admins, network engineers, and cyber personnel to translate RMF/ATO requirements into practical

Qualifications

• Bachelor's degree in cybersecurity, computer science, information technology, engineering, or related field, or equivalent professional experience.
• 7+ years of hands-on cybersecurity, systems engineering, network engineering, or information assurance experience.
• Experience supporting RMF and ATO activities within a DoD environment.

Responsibilities

• Perform hands-on security engineering in support of Navy RMF and ATO requirements.
• Implement and validate technical security controls across servers, virtualization, network, and logging environments.
• Harden systems in accordance with DISA STIGs and Navy security requirements.
• Perform vulnerability remediation, including analysis of findings, root-cause identification, remediation, and validation.
• Configure, secure, troubleshoot, and validate RHEL/Linux systems.
• Support security hardening and troubleshooting of VMware environments.
• Perform security configuration and troubleshooting of Cisco Catalyst and Cisco ACI infrastructure.
• Support centralized security logging and monitoring using Splunk and Cribl.
• Analyze system and security logs to troubleshoot issues and validate security requirements.
• Support collection and validation of technical evidence required for RMF/ATO activities.
• Translate RMF security requirements into practical technical implementations.
• Work with infrastructure teams to remediate security deficiencies.
• Automate repetitive security tasks where appropriate.

Skills

Linux administration

Vulnerability remediation

RMF/ATO experience

Network engineering

Education

Bachelor's degree in cybersecurity or related field

Tools

VMware

Cisco ACI

Cisco Catalyst

Splunk

Cribl

Tenable/Nessus

Job description

We are seeking a highly technical Information Systems Security Engineer (ISSE) to support a U.S. Navy program through the Risk Management Framework (RMF), Authority to Operate (ATO), system hardening, vulnerability remediation, and day-to-day security engineering activities.

This is a hands‑on engineering position. The ideal candidate is comfortable working directly on Linux servers, virtualization infrastructure, network infrastructure, and security monitoring platforms to implement, troubleshoot, validate, and maintain security controls.

The successful candidate will work closely with system administrators, network engineers, and cybersecurity personnel to identify security gaps and implement practical technical solutions that satisfy Navy RMF/ATO requirements.

This position is not primarily focused on strategy, program planning, configuration management, or developing project/VM plans. The focus is on technical execution and engineering.

Responsibilities

• Perform hands‑on security engineering in support of Navy RMF and ATO requirements.
• Implement and validate technical security controls across servers, virtualization, network, and logging environments.
• Harden systems in accordance with applicable DISA STIGs, Navy security requirements, and RMF control requirements.
• Perform vulnerability remediation, including analysis of findings, root‑cause identification, remediation, and validation.
• Configure, secure, troubleshoot, and validate RHEL/Linux systems.
• Support security hardening and troubleshooting of VMware environments.
• Perform security configuration and troubleshooting of Cisco Catalyst and Cisco ACI infrastructure.
• Support centralized security logging and monitoring using Splunk and Cribl.
• Analyze system and security logs to troubleshoot issues and validate security requirements.
• Support collection and validation of technical evidence required for RMF/ATO activities.
• Translate RMF security requirements into practical technical implementations.
• Work directly with infrastructure teams to remediate security deficiencies.
• Automate repetitive security engineering and validation tasks where appropriate.

Required Qualifications

• Bachelor's degree in cybersecurity, computer science, information technology, engineering, or a related technical field, or equivalent professional experience.
• 7+ years of hands‑on experience in cybersecurity, systems engineering, network engineering, or information assurance.
• Demonstrated experience supporting RMF and ATO activities within a DoD environment.
• Strong hands‑on experience with RHEL/Linux administration and security hardening.
• Experience implementing and validating DISA STIG requirements.
• Hands‑on experience with VMware environments.
• Hands‑on experience with Cisco Catalyst switching and Cisco ACI.
• Hands‑on experience with Splunk and Cribl or comparable enterprise logging technologies.
• Strong understanding of vulnerability scanning, remediation, and security validation.
• Strong Linux command‑line and troubleshooting skills.
• Ability to troubleshoot complex infrastructure and security issues across operating‑system, virtualization, network, and logging layers.

Desired Qualifications

• Experience supporting U.S. Navy or DoD mission systems.
• Experience with Navy RMF processes and ATO assessments.
• Experience with eMASS.
• Experience interpreting and implementing DISA STIGs across multiple technology platforms.
• Experience with Tenable/Nessus or comparable vulnerability‑scanning platforms.
• Experience with PowerShell, Bash, Python, or other scripting languages used for security automation.
• Experience troubleshooting authentication, access control, auditing, encryption, and system logging requirements.
• Experience integrating infrastructure logs into Splunk through Cribl.
• Experience with SCAP/STIG compliance tooling.

Security Clearance

• Active DoD Secret clearance required.
• Ability to obtain and maintain any additional program‑specific access requirements.

Certifications

One or more of the following is preferred:

• Security+
• CISSP
• CySA+
• Linux‑related certification
• VMware certification
• Cisco certification

Basic Qualifications:

• U.S. Citizenship Required

Red River offers a competitive salary, excellent benefits and an exceptional work environment.

EOE M/F/DISABLED/Vet

Red River is an equal opportunity employer. All qualified applicants will receive consideration for employment. Discrimination or harassment based upon any protected characteristics as defined by state or federal law is wholly inconsistent with our company values and will not be tolerated.

In order to ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Veterans Readjustment Act of 1974, and Title I of the American’s with Disabilities Act of 1990, applicants that require accommodation in the job application process may contact [e-mail]. PLEASE NOTE: This contact channel is reserved for use by individuals with disabilities who require special accommodations in order to submit an expression of interest in a position within Red River.