Senior Security Engineer: RMF & Risk Assessments, Onsite Reston

Chickasaw Nation Industries; Reston (VA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

Job summary

Chickasaw Nation Industries, Inc. in Reston, Virginia is seeking a Senior Security Engineer to help create and maintain IT security policies, architectures, and RMF security assessment activities.

The role involves conducting technical security assessments of complex information systems with minimal supervision and contributing to risk management and mitigation planning. This onsite position requires developing assessment plans, POA&M reports, and security authorization packages, while

Qualifications

• Bachelor's Degree with four years of relevant experience or an equivalent combination.
• Ability to obtain and maintain customer clearance for access to systems and facilities.
• Strong understanding of NIST RMF guidelines and industry best practices.

Responsibilities

• Develop security assessment plans and perform technical security assessments across controls; document results in an assessment report.
• Develop POA&M reports with weaknesses, remediation actions, and risk-based criticality ratings.
• Support IA RMF and Continuous Monitoring Programs with security administration and technical expertise.
• Prepare security authorization packages for new systems.
• Coordinate assessment activities with identified points of contact, working independently.
• Collaborate with system owners, security officers, developers, and IT operations to classify system security.
• Create initial system security and contingency plans aligned with policy.
• Provide recommendations for POA&M remediation and security engineering improvements.

Education

Bachelor's Degree

Job description

Chickasaw Nation Industries, Inc. in Reston, Virginia is seeking a Senior Security Engineer to help create and maintain IT security policies, architectures, and RMF security assessment activities.

The role involves conducting technical security assessments of complex information systems with minimal supervision and contributing to risk management and mitigation planning. This onsite position requires developing assessment plans, POA&M reports, and security authorization packages, while