Senior Security Engineer: RMF Lead & Threat Detection

AIS (Applied Information Sciences); Huntsville (AL); On-site; USD 101,000 - 152,000; Full time

Job summary

AIS, an employee-owned technology solutions company, is seeking a Senior Information Systems Security Engineer to lead RMF lifecycle activities and security-control assessments for government and commercial clients. You will provide security engineering leadership, risk analysis, and incident response support across complex information systems.

The positions are in Washington, DC, and Huntsville, AL, with competitive base salaries, strong growth potential, and a collaborative culture that values

Qualifications

• Minimum 8 years of experience in the secure design, analysis and testing of information-security systems and products.
• Minimum 8 years of experience applying methods, standards and approaches to ensure baseline security safeguards are appropriately implemented and documented.
• Minimum 8 years of experience developing and updating security test plans used to identify and mitigate information-system risk.

Responsibilities

• Lead, mentor and supervise security professionals supporting the end-to-end RMF lifecycle.
• Coordinate RMF Prepare activities and ensure roles, responsibilities and risk-management strategies are established and maintained.
• Guide information-system categorization based on mission/business impact and regulatory requirements.
• Advise on selection, tailoring and documentation of security controls.
• Oversee implementation of technical, operational and management controls throughout system and application lifecycles.
• Plan, execute and document security-control assessments.
• Prepare risk-management documentation supporting system authorization and executive decision-making.
• Direct continuous monitoring and assessment activities.
• Provide technical cybersecurity expertise supporting risk analysis, incident response, system remediation and audit activities.
• Work closely with technical personnel to address security configurations and technical security gaps.
• Track and communicate security-engineering status, risks and improvement opportunities to stakeholders.
• Maintain current knowledge of RMF, NIST guidance and security industry practices.

Skills

Secure design

RMF lifecycle

Security testing

Risk analysis

Security controls

Team leadership

Job description

AIS, an employee-owned technology solutions company, is seeking a Senior Information Systems Security Engineer to lead RMF lifecycle activities and security-control assessments for government and commercial clients. You will provide security engineering leadership, risk analysis, and incident response support across complex information systems.

The positions are in Washington, DC, and Huntsville, AL, with competitive base salaries, strong growth potential, and a collaborative culture that values