Senior ISSE: RMF Security Engineer (Hands-On)

GCI Incorporated; Tysons (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

GCI Incorporated seeks an Information Systems Security Engineer (ISSE) at SME level to lead security engineering across infrastructure, platforms, and applications. You will implement RMF within federal environments, design, implement, assess, and secure systems end-to-end, and serve as the technical focal point for security incidents in coordination with security teams.

The ideal candidate is hands-on, with expertise in RMF, NIST controls, SIEM, and cloud environments, capable of bridging

Qualifications

• Bachelor’s degree or equivalent in a technical discipline.
• Minimum ten years of applied cybersecurity experience or five years with degree.
• Hands-on RMF implementation in federal environments.
• Experience with RMF control implementations and ATO packages.
• Strong knowledge of NIST SP 800-53/800-37/800-30.
• Experience with SIEM platforms and incident response.

Responsibilities

• Serve as SME for cyber security engineering across system layers.
• Implement and validate security controls per RMF and NIST guidance.
• Lead RMF lifecycle activities: Categorize, Select, Implement, Assess, Authorize, Monitor.
• Coordinate incident response and triage security alerts.
• Collaborate with owners, architects, developers and operations.
• Prepare SSPs, SCA support, POA&Ms, risk assessments.

Skills

RMF expert

SIEM experience

Security incident response

Networking security

Cloud RMF

DevSecOps

Docker/Kubernetes

RMF artifacts

DoD overlays knowledge

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Splunk

ELK Stack

ArcSight

QRadar

Job description

GCI Incorporated seeks an Information Systems Security Engineer (ISSE) at SME level to lead security engineering across infrastructure, platforms, and applications. You will implement RMF within federal environments, design, implement, assess, and secure systems end-to-end, and serve as the technical focal point for security incidents in coordination with security teams.

The ideal candidate is hands-on, with expertise in RMF, NIST controls, SIEM, and cloud environments, capable of bridging