Information Systems Security Engineer I (RMF & Splunk)

Captivation Software LLC; Maryland; On-site; USD 130,000 - 270,000; Full time

Benefits offered by this job

20% 401k contributed

HSA contribution

Company-paid healthcare/insurance

Disability insurance

Job summary

Captivation Software LLC in the United States is seeking a mid level Information Systems Security Engineer to support daily security operations on the program. The role focuses on implementing and enforcing security controls to protect sensitive information and help maintain the program's security posture.

You will work with RMF processes, prepare SSPs and risk assessments, monitor events with Splunk, and ensure compliance with DoD 8570.

Qualifications

• Five years of ISSO experience on programs/contracts of similar scope
• Knowledge of security tools, encryption techniques/tools
• Experience with security documentation such as SSPs, risk assessments, C&A packages and SRTMs
• DoD 8570 compliance with IAT Level I or higher is required

Responsibilities

• Supports information security
• Helps create and enforce security policies and procedures, manage daily security operations, and maintains the system’s security posture
• Assesses security risks and solutions for critical information, manages security settings for software, hardware, and firmware, and reviews the security impact of system changes
• Prepares and reviews required security documents, including SSPs, risk assessments, C&A packages, and SRTMs
• Supports system authorization under the RMF
• Uses Splunk to monitor security events, analyze logs, and support incident response

Skills

ISSO experience

Security policy implementation

NIST RMF knowledge

Security posture management

Education

Bachelors in Cybersecurity or related field

DoD 8570 IAT Level I or higher

Tools

Splunk

Job description

Captivation Software LLC in the United States is seeking a mid level Information Systems Security Engineer to support daily security operations on the program. The role focuses on implementing and enforcing security controls to protect sensitive information and help maintain the program's security posture.

You will work with RMF processes, prepare SSPs and risk assessments, monitor events with Splunk, and ensure compliance with DoD 8570.