ISSE II: Security Engineering & RMF Specialist

RealmOne; Columbia (MD); On-site; USD 182,000 - 212,000; Full time

Benefits offered by this job

Healthcare Coverage

401K - retirement savings plan

Paid time off + holidays

Education & professional development

Job summary

RealmOne is seeking an experienced Information Systems Security Engineer (ISSE) to perform security assessments, design secure IA architectures, and ensure compliance with RMF/DIACAP. The role involves reviewing vulnerability scans (Nessus), mitigating risks, and supporting accreditation activities across multiple enclaves and data protection requirements.

The candidate will collaborate with Software Engineers, System Administrators, and DevOps staff, contributing to mission-critical security

Qualifications

• Fourteen years of ISSE experience on large programs required.
• Bachelor's degree in CS, IA, or related discipline required.
• Four years of ISSE experience may substitute for bachelor’s degree.

Responsibilities

• Participate as security engineering representative on teams for secure networking and enclave environments.
• Design, develop, and implement IA architectures, systems, or components.
• Support risk analysis, assessment, and RMF/DIACAP processes.
• Review/Assess Nessus vulnerability and configuration results.
• Lead mitigation efforts for vulnerabilities and compliance gaps.
• Update System Security Plans and support accreditation activities.

Skills

Security engineering

Nessus review

RMF framework

DIACAP awareness

System architecture

Education

Bachelor's degree in Computer Science or Information Assurance

Tools

Nessus

Job description

RealmOne is seeking an experienced Information Systems Security Engineer (ISSE) to perform security assessments, design secure IA architectures, and ensure compliance with RMF/DIACAP. The role involves reviewing vulnerability scans (Nessus), mitigating risks, and supporting accreditation activities across multiple enclaves and data protection requirements.

The candidate will collaborate with Software Engineers, System Administrators, and DevOps staff, contributing to mission-critical security