Senior ISSE: RMF & NIST Security Engineer

VT Group (VTG); Chantilly (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

VT Group (VTG) is seeking an Information Systems Security Engineer (ISSE) to design, implement, and maintain security controls across enterprise systems and networks. This role ensures systems comply with security requirements while supporting mission-critical operations.

The ISSE will work with system owners, engineers, and cybersecurity teams to integrate security throughout the system lifecycle, including RMF lifecycle activities, risk analyses, and security documentation such as SSP and

Qualifications

• Experience supporting RMF lifecycle and NIST 800-53 controls.
• Experience developing and maintaining A&A documentation (SSP/POA&M/ATO).
• Knowledge of Windows and Linux, and network security principles.

Responsibilities

• Design, implement, and maintain security controls for information systems and networks.
• Support RMF lifecycle activities: categorization, control selection, implementation, assessment, and authorization.
• Conduct security assessments, vulnerability scans, and risk analyses.
• Develop and maintain SSP, POA&M, SAR, and related security documentation.
• Ensure compliance with NIST RMF and organizational security policies.
• Collaborate with ISSOs, system administrators, and developers to remediate vulnerabilities.
• Support continuous monitoring and incident response activities.
• Implement and manage security tools (SIEM, IDS/IPS, endpoint protection).
• Provide guidance on secure system architecture and design.
• Stay current on threats, vulnerabilities, and security technologies.

Skills

RMF lifecycle

Vulnerability assessments

Incident response

Security architecture

Encryption/Access control

Education

Bachelor’s degree in Cybersecurity or related field

Tools

ACAS

Nessus

SIEM

Job description

VT Group (VTG) is seeking an Information Systems Security Engineer (ISSE) to design, implement, and maintain security controls across enterprise systems and networks. This role ensures systems comply with security requirements while supporting mission-critical operations.

The ISSE will work with system owners, engineers, and cybersecurity teams to integrate security throughout the system lifecycle, including RMF lifecycle activities, risk analyses, and security documentation such as SSP and