Information Systems Security Engineer (ISSE) – RMF

New Directions Technologies, Inc; Port Hueneme (CA); On-site; USD 75,000 - 96,000; Full time

Job summary

New Directions Technologies, Inc. seeks an experienced Information Systems Security Engineer (ISSE) to support the Naval Surface Warfare Center, Port Hueneme Division.

The role focuses on RMF assessment, A&A, and developing authorization packages in eMASS to ensure Navy information systems remain compliant. You will work with system owners, cybersecurity staff, admins and developers to document risks, remediate deficiencies, and maintain security authorizations through the RMF lifecycle,

Qualifications

• U.S. Citizenship is required.
• Must obtain and maintain a DoW security clearance.
• Associate Degree or CNSSI 4011 Certificate or CIN J-3B-0440 (IP BASIC) or equivalent military training.
• CompTIA Security+ (CE) certification required.
• 1–3 years specialized entry level experience in Specialty Area 72 (Information Systems Security Management).
• Minimum 40 continuing education hours per year.

Responsibilities

• Develop and maintain RMF authorization packages in eMASS (SSP, control statements, POA&Ms).
• Support RMF lifecycle phases: initial ATOs, reauthorizations, annual reviews, changes, and continuous monitoring.
• Evaluate security controls and conduct testing; analyze results from ACAS, SCAP, DISA STIGs, VRAM, etc.; document findings and evidence.
• Develop and track POA&Ms, coordinate remediation actions, and document mitigations and residual risks.

Skills

RMF knowledge

A&A experience

Vulnerability assessment

Cybersecurity engineering

Education

Associate degree CNSSI 4011 or military training CIN J-3B-0440 (IP BASIC)

Tools

ACAS

SCAP

DISA STIGs

VRAM

Job description

Information Systems Security Engineer (ISSE) – RMF - ID#:JR-2026-176

Full Time

Job Description:

New Directions Technologies, Inc. (NDTI) is seeking an experienced Information Systems Security Engineer (ISSE) to join our cybersecurity team supporting the Naval Surface Warfare Center, Port Hueneme Division (NSWC PHD).

The ISSE will provide cybersecurity engineering and Risk Management Framework (RMF) Assessment and Authorization (A&A) support for Navy information systems. This position is responsible for developing and maintaining authorization packages in the Enterprise Mission Assurance Support Service (eMASS), evaluating security-control implementation, analyzing vulnerability and compliance results, and supporting systems through initial authorization, reauthorization, and continuous monitoring.

The successful candidate will collaborate with system owners, cybersecurity personnel, system administrators, developers, Security Control Assessors, and other stakeholders to identify cybersecurity risks, document compliance, remediate deficiencies, and obtain or maintain system authorization.

Other responsibilities include:

• Develop, update, and maintain complete RMF authorization packages in eMASS, including system security plans, control implementation statements, assessment documentation, supporting artifacts, POA&Ms, and authorization decision materials.
• Support all phases of the RMF lifecycle, including initial ATOs, reauthorizations, annual reviews, system changes, and continuous monitoring, in accordance with DoDI 8500.01, DoDI 8510.01, applicable NIST publications, Department of the Navy guidance, and local cybersecurity requirements.
• Evaluate technical and nontechnical security controls; conduct cybersecurity testing and assessment activities; analyze vulnerability and compliance results from ACAS, SCAP Compliance Checker, DISA STIGs, Security Readiness Review scripts, VRAM, and related tools; and document findings and supporting evidence.
• Develop and track POA&Ms, coordinate remediation activities with technical teams, validate corrective actions, and document approved mitigations, exceptions, residual risks, and closure evidence for identified deficiencies.
• Provide cybersecurity engineering and system-hardening guidance for applications, networks, databases, cloud services, and supporting infrastructure to ensure security requirements are incorporated throughout the system lifecycle.
• Coordinate RMF activities with system owners, cybersecurity personnel, administrators, developers, assessors, and Authorizing Official representatives while preparing technical reports, risk summaries, status briefings, and other documentation for government leadership.

ECraft ISSM1

Education and Work Experience Requirements:

Due to customer requirements, U.S Citizenship is required.

Must be able to obtain and maintain a DoW Security Clearance for duration of employment.

Associate Degree from accredited University or CNSSI 4011 Certificate or successful completion of military training course: CIN J-3B-0440 (IP BASIC) (or DOD Service equivalent).

A CompTIA Security + (CE) certification is required.

Validated 1-3 years specialized entry level experience in Specialty Area 72 (Information Systems Security Management)

As a member of Cybersecurity Workforce individual will need to maintain a minimum of 40 continuing education hours per year.

OJT Evaluation consist of: NAVEDTRA 43462-1C, or NAVEDTRA 43462-2, or NAVEDTRA 43469 watch station 304 or If IP O1-3 or NAVEDTRA 43360-2 or If IP O4-5 or NAVEDTRA 43360-3 and must be completed in directed timelines.

Salary: the expected pay range for this position is $74,880 to $95,680 but is subject to change.