Information Systems Security Engineer (RMF)

Saalex Corporation in; Newport (RI); On-site; USD 60,000 - 70,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Paid time off

Disability coverage

Training & development

Wellness resources

Job summary

Saalex Corporation in Newport, RI is seeking an Information Systems Security Engineer (RMF) to support A&A activities and maintain ATOS for DoD RMF-compliant systems. The role is full-time onsite and requires at least two years in RMF/A&A with Security+ or equivalent certification.

Responsibilities include developing RMF packages, conducting control assessments, and using eMASS/ACAS/STIG tools to ensure compliance across Navy RMF environments.

Qualifications

• Minimum of two (2) years of cybersecurity experience supporting RMF and A&A activities.
• Experience developing RMF packages and supporting documentation.
• Experience with eMASS, ACAS, STIG Viewer and compliance activities.
• Working knowledge of NIST standards, RMF, DISA STIGs and continuous monitoring.
• Ability to manage multiple priorities and communicate with technical and non-technical stakeholders.
• CompTIA Security+ or DoD 8570/8140 IAM/IAT Level II certification.

Responsibilities

• Support A&A activities to maintain ATOs per RMF requirements.
• Assist cybersecurity compliance, assessments, and continuous monitoring.
• Develop and review RMF package documentation and artifacts.
• Perform security control assessments in line with NIST guidance.
• Use eMASS, ACAS, STIG tools to document and monitor compliance.
• Provide RMF guidance and support training for team members.

Skills

RMF experience

A&A activities

NIST standards

Stakeholder communication

Education

Bachelor's in Cybersecurity/IT/CS

Tools

eMASS

ACAS

STIG Viewer

STIG OSS Manager

Job description

Information Systems Security Engineer (RMF) (Finance)

Saalex is seeking a Information Systems Security Engineer (RMF) in Newport, RI to support the Naval Undersea Warfare Center Division Newport (NUWCDIVNPT). The selected candidate will support Assessment and Authorization (A&A) activities and assist in maintaining Authorizations to Operate (ATOs) for enterprise and Research, Development, Test & Evaluation (RDT&E) systems and networks.

Position Type: Full-Time

Salary: $60k-$70k annually (depending on experience)

Work Location: Full-time onsite

Essential Functions:

• Support Assessment and Authorization (A&A) activities to maintain Authorizations to Operate (ATOs) in accordance with DoD and Department of the Navy RMF requirements.
• Support cybersecurity compliance, security assessments, continuous monitoring activities, and information assurance efforts across Navy enterprise and RDT&E systems and networks.
• Develop, review, and maintain RMF package documentation, including Security Plans, Risk Assessments, POA&Ms, architecture diagrams, asset inventories, and system/site policies and procedures.
• Perform security control assessments in accordance with NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, CNSSI 1253, and applicable Navy cybersecurity guidance.
• Execute Security Assessment Plans, review Security Test Reports, identify security deficiencies, and support risk mitigation activities.
• Utilize cybersecurity tools including eMASS, ACAS, STIG Viewer, and STIG OSS Manager to assess, document, and monitor compliance.
• Develop and maintain cybersecurity documentation including Contingency Plans, Contingency Plan Tests, Business Impact Analyses, and other required security artifacts.
• Provide guidance on Navy RMF policies, DoD cybersecurity directives, NAVSEA business rules, and cybersecurity compliance requirements while supporting process improvement initiatives.
• Provide RMF and eMASS guidance to team members and stakeholders and support cybersecurity training efforts as needed.
• Attend stakeholder meetings, track action items, coordinate follow-up activities, and collaborate with government and contractor personnel to support successful A&A outcomes.
• Other duties as assigned or required.

Requirements

Required:

• Minimum of two (2) years of cybersecurity experience supporting RMF and Assessment & Authorization (A&A) activities.
• Experience developing and maintaining RMF packages, including Security Plans, Risk Assessments, POA&Ms, and supporting documentation.
• Experience with eMASS, ACAS, STIG Viewer, and cybersecurity compliance activities.
• Working knowledge of NIST standards, RMF, DISA STIGs, and continuous monitoring requirements.
• Ability to manage multiple priorities and communicate effectively with technical and non-technical stakeholders.
• CompTIA Security+ or other DoD 8570/8140 IAM or IAT Level II certification required.

Desired:

• Experience supporting Navy, NAVSEA, or other DoD cybersecurity programs.
• Experience conducting security control assessments and supporting ATO efforts.
• Familiarity with cybersecurity process improvement initiatives and RMF policy development.
• Experience providing cybersecurity training, mentoring, or technical guidance.
• CAP, CASP+, CISSP, or other advanced cybersecurity certification.

Education:

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field preferred. Equivalent combination of education, certifications, military experience, and professional cybersecurity experience may be considered.

Security Clearance:

Active Secret clearance required. Requirements to obtain a clearance include US Citizenship, security investigation, etc.

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Short Term & Long Term Disability
• Training & Development
• Wellness Resources
• Stock Option Plan