Security Engineer II: RMF & ISCM Specialist

Paragon Technology Group; Illinois; On-site; USD 90,000 - 125,000; Full time

Job summary

Paragon Technology Group is seeking a Security Engineer II to support the USTRANSCOM program. You will perform vulnerability/risk assessments, ISCM concepts, and security implementations in a high-autonomy role, translating complex risks for leadership.

Work involves risk management, A&A reporting, POA&Ms, and collaboration with government customers and PMOs to modernize and secure systems while adhering to DoW RMF, STIG/SRG, and NIST guidance.

Qualifications

• Experience documenting RMF family plans and artifacts.
• Experience participating in TIMs on PMO security engineering topics.
• Experience coordinating and collaborating with Development contract personnel to identify security requirements.
• Experience coordinating with multiple agencies to determine hybrid security requirements.

Responsibilities

• Review evolving NIST requirements to support risk assessment activities.
• Prepare specifications to remediate cybersecurity deficiencies and ensure secure coding practices.
• Collaborate with government customers to develop POA&Ms and support risk acceptance activities.
• Design and implement solutions to protect confidentiality, integrity, and availability of sensitive information.
• Conduct security product evaluations and recommend upgrades to improve security posture.
• Perform testing and audit log reviews to evaluate current security measures.
• Participate in drafting deliverables and peer reviews.

Skills

Security engineering

Risk assessment

NIST RMF

ISCM concepts

Education

Bachelor’s degree in CS/Cybersecurity

IAM II Certification

Tools

ACAS

Nessus

eMASS

Job description

Paragon Technology Group is seeking a Security Engineer II to support the USTRANSCOM program. You will perform vulnerability/risk assessments, ISCM concepts, and security implementations in a high-autonomy role, translating complex risks for leadership.

Work involves risk management, A&A reporting, POA&Ms, and collaboration with government customers and PMOs to modernize and secure systems while adhering to DoW RMF, STIG/SRG, and NIST guidance.