Senior ISSE (RMF Expert) – TS with SCI Eligibility

ecsfederal; Washington (District of Columbia); On-site; USD 175,000 - 190,000; Full time

Benefits offered by this job

TS/SCI with SCI eligibility

Job summary

Everforth ECS is seeking an Information System Security Engineer SME to design, implement, and maintain secure information systems in our Washington, DC office. This expert role emphasizes RMF lifecycle management, risk assessment, and compliant security controls.

You will lead security activities, guide categorization and control selection, provide advisory support for audits and incident response, and mentor teammates, with TS clearance eligibility and contract-award contingency.

Qualifications

• 10+ years of progressive security engineering experience including RMF.
• Hold one of the listed certifications: CISSP, CASP, CSSLP, ISSEP, or ISSAP.

Responsibilities

• Lead and supervise a security team for RMF lifecycle implementations.
• Oversee Prepare step roles, responsibilities, and risk strategies.
• Guide system categorization to align with impact and compliance requirements.
• Select, tailor, and document security controls per categorizations and risk appetite.
• Oversee implementation of security controls across lifecycles with focus on deliverables.
• Plan and document security control assessments to validate effectiveness.
• Prepare risk management documentation for authorization and executive decisions.
• Monitor and assess security posture with metrics for continuous improvement.
• Advise on cybersecurity risk analysis, incident response, remediation, and audit support.
• Provide security training and guidance to team and stakeholders.
• Track status, risks, and improvement opportunities for leadership.
• Maintain knowledge of RMF, NIST guidance, and best practices.

Skills

Security engineering

RMF lifecycle

Risk management

Security controls

Cybersecurity advisory

Education

CISSP

CASP

CSSLP

ISSEP

ISSAP

Tools

GRC tools

RMF tools

Job description

Everforth ECS is seeking an Information System Security Engineer SME to design, implement, and maintain secure information systems in our Washington, DC office. This expert role emphasizes RMF lifecycle management, risk assessment, and compliant security controls.

You will lead security activities, guide categorization and control selection, provide advisory support for audits and incident response, and mentor teammates, with TS clearance eligibility and contract-award contingency.