ISSE: RMF/ATO Specialist for Navy Networks

Leidos; Norfolk (VA); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos seeks an Information System Security Engineer (ISSE) to support cybersecurity authorization efforts for the Navy SMIT program. You will act as the ISSE for RMF/ATO packages, coordinate ATO artifacts, and ensure compliance using eMASS, ACAS, STIGs, and DoD RMF guidance.

The role requires a DoD Secret clearance, RMF knowledge, and hands-on experience with cybersecurity tooling to deliver secure NMCI-like enterprise networks under tight schedules.

Qualifications

• U.S. Citizen with DoD Secret Clearance.
• Active security certification meeting DOD 8570 IAT level III or higher.
• Bachelor's degree with 4+ years of relevant cybersecurity experience or Master's with 2+ years.
• Understanding of RMF steps, especially 4–7.
• Ability to identify STIGs across a system boundary.
• Knowledge of exploiting techniques (MITRE ATT&CK) for risk mitigation.
• Experience with eMASS, TR Import and POAM import.
• Experience supporting RMF/IA manuals, DoDI guidance and RMF guidance.

Responsibilities

• Serve as ISSE for ATO packages under RMF.
• Develop and review ATO submissions and coordinate artifacts.
• Evaluate software/hardware against NIST SP 800-53 controls.
• Prepare and submit cybersecurity artifacts to eMASS to achieve IATT/ATO milestones.
• Monitor systems with automated scans and reporting for authorizations.
• Verify patch compliance using ACAS, IAVA dashboards, Defender for Endpoints.

Skills

RMF knowledge

MITRE ATT&CK

Strong communication

Analytical skills

Education

Bachelor's degree + 4 years experience or Master's + 2 years

Tools

eMASS

ACAS

STIG

NIST SP 800-53 Rev 5

Defender for Endpoints

Job description

Leidos seeks an Information System Security Engineer (ISSE) to support cybersecurity authorization efforts for the Navy SMIT program. You will act as the ISSE for RMF/ATO packages, coordinate ATO artifacts, and ensure compliance using eMASS, ACAS, STIGs, and DoD RMF guidance.

The role requires a DoD Secret clearance, RMF knowledge, and hands-on experience with cybersecurity tooling to deliver secure NMCI-like enterprise networks under tight schedules.