Senior ISSE — RMF A&A Lead (NIST 800-53 Rev 5)

Watershed Security; Jacksonville (FL); On-site; USD 95,000 - 114,000; Full time

Benefits offered by this job

Medical and dental benefits

Educational reimbursement

401K with matching

PTO 15 days

11 paid holidays per year

Job summary

Watershed Security is seeking an Information System Security Engineer (ISSE) for a six-month task in Jacksonville, FL to coordinate the A&A lifecycle for a PSS alarm monitoring system and drive RMF re-authorization using NIST SP 800-53 Rev 5 controls to secure an Authority to Operate.

The ISSE will serve as the primary cybersecurity advisor to the systems team, analyzing the environment for compliance and addressing EOL risks.

Qualifications

• 7+ years in Cybersecurity Engineering, A&A, RMF package development.
• Expert with RMF processes and NIST SP 800-53 Rev 5 control sets.
• Proficient with DISA eMASS and ACAS tooling.
• Experience with Windows Active Directory, Citrix, IoT/OT security environments.
• U.S. Citizen with an active DoD Secret clearance.
• Bachelor’s degree in a technical discipline or equivalent experience.

Responsibilities

• Lead RMF re-authorization: develop, analyze, and submit ATO via Navy eMASS.
• Align controls to NIST SP 800-53 Rev 5 framework.
• Perform vulnerability and EOL assessments using ACAS/ STIG tools.
• Plan risk mitigation and advise on accreditation impact of changes.
• Generate artifacts: SSP, RAR, POA&M.

Skills

RMF & A&A

NIST SP 800-53 Rev 5

eMASS & ACAS

Windows AD / Citrix

Security clearance

Education

Bachelor's degree in technical discipline

Tools

DISA eMASS

ACAS (Nessus)

Job description

Watershed Security is seeking an Information System Security Engineer (ISSE) for a six-month task in Jacksonville, FL to coordinate the A&A lifecycle for a PSS alarm monitoring system and drive RMF re-authorization using NIST SP 800-53 Rev 5 controls to secure an Authority to Operate.

The ISSE will serve as the primary cybersecurity advisor to the systems team, analyzing the environment for compliance and addressing EOL risks.