Senior ISSE - RMF Security & Cloud Controls Lead

Bow Wave LLC; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Bow Wave LLC seeks an experienced Security (Cloud a plus) Engineer (ISSE) to lead and mentor a contractor security team in implementing the RMF lifecycle for FBI IT systems. The role focuses on Prepare, system categorization, control selection, and ongoing monitoring, delivering high-quality assessments and documentation to support authorization decisions and continuous compliance.

Ideal candidates bring 8+ years of security design, analysis, and testing, with CISSP or CEH and cloud

Qualifications

• 8+ years in secure design, analysis, and test of information security systems.
• 8+ years applying methods and standards to ensure baseline safeguards are implemented and documented.
• 8+ years creating and updating security test plans to detect and mitigate risk.

Responsibilities

• Lead, mentor, and supervise contractor security professionals in RMF lifecycle implementation for FBI IT systems.
• Oversee Prepare step activities: define roles, responsibilities, and risk management strategies.
• Guide system categorization to classify information systems by impact and regulatory requirements.
• Advise on selection, tailoring, and documentation of security controls aligned with system categorizations and compliance.
• Oversee implementation of technical, operational, and management controls throughout lifecycles.
• Ensure security control assessments are planned, executed, and documented to validate safeguards.

Skills

Secure design

Security analysis

Security testing

CISSP

CEH

RMF

NIST guidelines

Cloud security

Job description

Bow Wave LLC seeks an experienced Security (Cloud a plus) Engineer (ISSE) to lead and mentor a contractor security team in implementing the RMF lifecycle for FBI IT systems. The role focuses on Prepare, system categorization, control selection, and ongoing monitoring, delivering high-quality assessments and documentation to support authorization decisions and continuous compliance.

Ideal candidates bring 8+ years of security design, analysis, and testing, with CISSP or CEH and cloud