Information Systems Security Engineer (ISSE) / Systems Security Analyst - Federal Client

Vinsys Information Technology Inc; Santa Rita (GU); On-site; USD 110,000 - 160,000; Full time

Job summary

Vinsys Information Technology Inc is seeking an Information Systems Security Engineer (ISSE) to provide cybersecurity engineering and RMF support for NAVFAC Marianas CIO. The role ensures confidentiality, integrity, and availability of systems, networks, and data through planning, analysis, implementation, and continuous monitoring.

The position requires DoD/Navy RMF lifecycle execution, ATO management, vulnerability remediation, incident response, and security documentation, with onsite support

Qualifications

• Must be a U.S. Citizen.
• Must possess an active Tier 5 (T5) security clearance.
• Must be able to obtain required DoD/Navy system access and CAC credentials.

Responsibilities

• Execute RMF lifecycle steps 1–6 and maintain artifacts.
• Develop and validate RMF artifacts and eMASS packages.
• Coordinate ATO activities and maintain ATO packages.
• Perform vulnerability management and evidence collection.
• Support continuous monitoring, vulnerability scanning, and incident response.

Skills

RMF experience

Cybersecurity documentation

Communication with ISSMs

Incident response

Education

Tier 5 (T5) security clearance

U.S. Citizenship

Job description

Location

• Naval Facilities Engineering Systems Command (NAVFAC) Marianas Command Information Office (CIO)
• Building 3190, Naval Base Guam (NBG), Santa Rita, Guam 96915

Work Arrangement

• Onsite Remote/Hybrid Not Allowed. The position requires full-time onsite support at Naval Base Guam.
• Work will be performed up to 40 hours per week, Monday through Friday, during normal business hours (excluding Federal holidays).
• Remote telework is not authorized under this contract except for emergency/situational circumstances approved in advance by the Contracting Officer s Representative (COR).
• The contractor may be required to support occasional activities at:
  • Naval Base Guam (NBG)
  • Marine Corps Base Camp Blaz Guam (MCBCB)
  • Andersen Air Force Base (AAFB)
  • Local travel between installations is required using contractor-provided transportation.

Position Overview

• The Information Systems Security Engineer (ISSE) will provide cybersecurity engineering and Risk Management Framework (RMF) support to NAVFAC Marianas Command Information Office (CIO). The role is responsible for ensuring the confidentiality, integrity, and availability of systems, networks, and data through cybersecurity planning, analysis, implementation, documentation, vulnerability management, compliance assessments, and continuous monitoring activities.
• The position supports Facility-Related Control Systems (FRCS) and requires execution of Department of Navy (DoN) and NAVFAC cybersecurity requirements, including RMF lifecycle activities, Authority to Operate (ATO) management, vulnerability remediation, incident response, and security documentation.

Primary Responsibilities

• Execute the complete DoD/Navy Risk Management Framework (RMF) lifecycle (Steps 1 6), including:
• RMF artifact development and validation
• eMASS package preparation and uploads
• Security control documentation and evidence collection
• Support Authority to Operate (ATO) activities:
• Maintain and track ATO packages
• Perform annual security reviews
• Prepare Memorandums for Record (MFRs) for system baseline changes
• Develop and maintain cybersecurity documentation:
• Security policies
• Standard Operating Procedures (SOPs)
• Security implementation plans aligned with NIST SP 800-53 controls
• Perform vulnerability management activities:
• Execute ACAS, SCAP, and Evaluate STIG assessments
• Conduct manual STIG/SRG validations
• Maintain vulnerability tracking through VRAM
• Prepare Security Center and eMASSter reports
• Perform continuous monitoring activities:
• Vulnerability scanning
• Audit log reviews
• POA&M updates
• Security control assessments
• Support RMF Step 4 onsite validation:
• Coordinate assessments
• Collect technical evidence
• Support system owners and validation teams
• Support configuration management:
• Participate in Configuration Control Board (CCB) activities
• Provide cybersecurity impact analysis and risk assessments
• Support cybersecurity incident response:
• Participate in the MAR Cyber Emergency Response Team (CERT)
• Participate in on-call incident response rotation
• Prepare incident reports and after-action documentation
• Provide operational reporting:
• Bi-weekly RMF status reports
• Maximo/eProjects updates
• Monthly Status Reports (MSR)

Required Qualifications

• Clearance & Citizenship
• Must be a U.S. Citizen.
• Must possess an active Tier 5 (T5) security clearance or obtain one before onboarding.
• Must be able to obtain required DoD/Navy system access and CAC credentials.
• Cybersecurity Certification Requirements
• Personnel must meet DoDM 8140.03 Cyber Workforce requirements for:
• Work Role Code (WRC): 461
• Work Role Title: Systems Security Analyst
• Required Proficiency Level: Intermediate

Approved Certifications Include

• Security+
• CCSP
• Cloud+
• GICSP
• GISF
• GSEC
• CISSP-ISSEP
• CISSP
• CySA+
• Other DoDM 8140.03 approved certifications

Minimum Recommended

• 5+ years of Risk Management Framework (RMF) experience
• 1+ year specialized experience supporting Facility-Related Control Systems (FRCS) cybersecurity engineering activities
• Demonstrated ability to:
• Work independently with minimal government supervision
• Develop cybersecurity documentation
• Communicate with ISSMs, system owners, and government stakeholders
• Prepare technical reports and security assessments