Information Systems Security Engineer - Keyport, WA

Arcfield; Keyport (WA); On-site; USD 70,000 - 122,000; Full time

Job summary

Arcfield is seeking an experienced Information Assurance professional to support A&A, RMF compliance, and continuous monitoring across multi-level environments. You will maintain system security documentation, run scans, and coordinate with engineering and ISSMs to ensure timely ATO readiness.

The role requires a Bachelor's degree with 8–10 years of IA/ISSE experience, active SECRET clearance, and familiarity with DIACAP, NIACAP, NIST SP 800-37, and DCID 6/3 frameworks.

Qualifications

• Bachelor's degree and 8–10 years of information assurance and information systems security engineering duties.

Responsibilities

• Support Assessment and Authorization (A&A) and Continuous Monitoring ensuring RMF compliance.
• Update System Security Plans, Boundary Diagrams, hardware/software lists in eMASS.
• Run ACAS scans and SSC checks to ensure STIG compliance.
• Track vulnerabilities and update POA&Ms to maintain compliance.
• Coordinate between engineering teams and ISSM to complete ATO packages.

Skills

Information Assurance

Security Compliance

Vulnerability Assessments

Incident Response

Education

BS degree

MS degree

High School Diploma

Tools

eMASS

ACAS

SSC

Job description

Responsibilities

• Experienced with frequent use and application of technical standards, principles and theories.
• Works under general supervision, providing solutions to technical problems of moderate scope/complexity.
• Provides technical and programmatic Information Assurance Services to internal and external customers in support of network and information security systems.
• Designs, develops and implements security requirements within an organization’s business processes.
• Prepares documentation from information obtained from customer using accepted guidelines such as DITSCAP (DoD Information Technology Security Certification and Accreditation Process).
• Prepares Security Test and Evaluation plans.
• Provides certification and accreditation support in the development of security and contingency plans and conducts complex risk and vulnerability assessments.
• Analyzes policies and procedures against Federal laws and regulations and provides recommendations for closing gaps.
• Develops and completes system security plans and contingency plans.
• Recommends system enhancements to improve security deficiencies.
• Develops, tests and integrates computer and network security tools.
• Secures system configurations and installs security tools, scans systems in order to determine compliancy and report results and evaluates products and various aspects of system administration.
• Conducts security program audits and develops solutions to lessen identified risks.
• Develops strategies to comply with privacy, risk management, and e-authentication requirements.
• Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.
• Evaluates, develops and enhances security requirements, policy and tools.
• Provides assistance in computer incident investigations.
• Performs vulnerability assessments including development of risk mitigation strategies.
• Requires a Bachelors degree and eight to ten years of related experience performing a wide variety of information assurance and information systems security engineering duties, to include the certification and accreditation of information systems using DIACAP (formerly DITSCAP), NIACAP, NIST SP 800-37, and/or DCID 6/3 frameworks.

Specific Responsibilities:

• Support of Assessment and Authorization (A&A) and Continuous Monitoring activities ensuring compliance with Risk Management Framework (RMF) requirements across multi-level classification environments with diverse technologies and services.
• Update System Security Plans, Boundary Diagrams, and hardware/software lists in the Enterprise Mission Assurance Support Service (eMASS).
• Run weekly Assured Compliance Assessment Solution (ACAS) scans and use the Security Content Automation Protocol (SCAP) Compliance Checker (SSC) to ensure Defense Information Systems Agnecy (DISA) Security Technical Implementation Guide (STIG) Compliance.
• Track vulnerabilities, document mitigation statements, and update Plan of Action & Milestones (POA&M) to ensure continued compliance.
• Provide coordination between engineering teams and Information Systems Security Manager (ISSM) to ensure Authority to Operate (ATO) packages are complete, accurate and ready for submission.

Qualifications

• BS 2-4 Years, MS 0-2 or HS 8-10
• COMPTIA SEC+ Certification
• Possess and Maintain a SECRET Security Clearance
• Familiarity with, and experience using, eMASS, ACAS, SSC
• Knowledge of, and experience with, Navy A&A/RMF Process

Equal Pay Act

This is the projected compensation range for this position. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, Arcfield invests in its employees beyond just compensation. Arcfield 's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long-Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.Min: $70,123.69Max: $121,931.49

EEO Statement

We are an equal opportunity employer and federal government contractor. We do not discriminate against any employee or applicant for employment as protected by law.