ISSE: Secure Systems Architect & RMF Leader

RPMGlobal; Annapolis (MD); On-site; USD 130,000 - 185,000; Full time

Job summary

Base-2 Solutions is seeking an Information Systems Security Engineer (ISSE) to safeguard complex systems supporting national defense and critical operations. You will lead security design, RMF artifacts, and assessment activities, collaborating with system architects and engineers.

Ideal candidates have TS/SCI with Full Scope Poly, experience with DoD/IC guidelines, and proficiency in security testing tools and cloud security across AWS, Azure, or GCP.

Qualifications

• Experience with security frameworks and standards such as NIST SP 800-53, RMF, ICD 503, CNSS, DoD STIGs.
• Experience with security tools such as ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, McAfee ePO.
• Experience with security technologies including Firewalls, IDS/IPS, SIEMs, VPNs, PKI, Multi-Factor Authentication.
• Experience with system security documentation: SSPs, POA&Ms, SARs, SCTM.
• Experience with Linux, Unix, Windows, and Virtualization technologies (VMware, Hyper-V).
• Experience with cloud platforms such as AWS, Azure, Google Cloud with a focus on cloud security.
• Experience with encryption protocols and technologies such as TLS/SSL, IPsec, VPN, PKI.
• Experience with security testing tools: Nmap, Metasploit, Burp Suite, Kali Linux.
• Scripting and automation experience: Python, PowerShell, Bash.
• Knowledge of SDLC, software assurance, and secure coding practices.
• Experience with JIRA, Confluence, ServiceNow.
• Certifications such as CISSP, CAP, CEH, Security+, AWS Security Specialty, or equivalent.

Responsibilities

• Develops, implements, and maintains security solutions for complex systems to ensure confidentiality, integrity, and availability.
• Conducts system security analysis, risk assessments, and vulnerability assessments to identify and mitigate risks.
• Supports the development of security architecture and system security engineering artifacts based on NIST, DoD, and IC policies and guidelines.
• Collaborates with system architects, software engineers, and network engineers to incorporate security requirements into system design.
• Develops and maintains System Security Plans (SSPs), Security Assessment Reports (SARs), and related RMF documentation.
• Performs continuous monitoring and ensures compliance with applicable security standards (NIST SP 800-53, ICD 503, CNSS, etc.).
• Provides recommendations for improving system security posture and addresses security incidents as they arise.
• Engages in security testing, evaluation, and certification & accreditation (C&A) activities.
• Interfaces with government customers and stakeholders to effectively communicate technical information and security strategies.

Skills

RMF & NIST SP 800-53

Cloud security

Linux/Windows/UNIX

Scripting (Python/PowerShell/Bash)

Secure coding practices

Tools

ACAS

Nessus

Tenable

Splunk

Wireshark

HBSS

McAfee ePO

Nmap

Metasploit

Burp Suite

Kali Linux

VMware/Hyper-V

Job description

Base-2 Solutions is seeking an Information Systems Security Engineer (ISSE) to safeguard complex systems supporting national defense and critical operations. You will lead security design, RMF artifacts, and assessment activities, collaborating with system architects and engineers.

Ideal candidates have TS/SCI with Full Scope Poly, experience with DoD/IC guidelines, and proficiency in security testing tools and cloud security across AWS, Azure, or GCP.