RMF ISSE — Cybersecurity Engineer & A&A Leader

New Directions Technologies, Inc; Port Hueneme (CA); On-site; USD 75,000 - 96,000; Full time

Job summary

New Directions Technologies, Inc. seeks an experienced Information Systems Security Engineer (ISSE) to support the Naval Surface Warfare Center, Port Hueneme Division.

The role focuses on RMF assessment, A&A, and developing authorization packages in eMASS to ensure Navy information systems remain compliant. You will work with system owners, cybersecurity staff, admins and developers to document risks, remediate deficiencies, and maintain security authorizations through the RMF lifecycle,

Qualifications

• U.S. Citizenship is required.
• Must obtain and maintain a DoW security clearance.
• Associate Degree or CNSSI 4011 Certificate or CIN J-3B-0440 (IP BASIC) or equivalent military training.
• CompTIA Security+ (CE) certification required.
• 1–3 years specialized entry level experience in Specialty Area 72 (Information Systems Security Management).
• Minimum 40 continuing education hours per year.

Responsibilities

• Develop and maintain RMF authorization packages in eMASS (SSP, control statements, POA&Ms).
• Support RMF lifecycle phases: initial ATOs, reauthorizations, annual reviews, changes, and continuous monitoring.
• Evaluate security controls and conduct testing; analyze results from ACAS, SCAP, DISA STIGs, VRAM, etc.; document findings and evidence.
• Develop and track POA&Ms, coordinate remediation actions, and document mitigations and residual risks.

Skills

RMF knowledge

A&A experience

Vulnerability assessment

Cybersecurity engineering

Education

Associate degree CNSSI 4011 or military training CIN J-3B-0440 (IP BASIC)

Tools

ACAS

SCAP

DISA STIGs

VRAM

Job description

New Directions Technologies, Inc. seeks an experienced Information Systems Security Engineer (ISSE) to support the Naval Surface Warfare Center, Port Hueneme Division.

The role focuses on RMF assessment, A&A, and developing authorization packages in eMASS to ensure Navy information systems remain compliant. You will work with system owners, cybersecurity staff, admins and developers to document risks, remediate deficiencies, and maintain security authorizations through the RMF lifecycle,