TS/SCI ISSE – RMF Security Engineer for DoD/IC

Rippling, Inc.; Annapolis (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

11 paid holidays

3 weeks PTO

Group medical plan

Dental, vision, life insurance and STD

Job summary

Momentum Engineering, Inc. seeks an experienced Information Systems Security Engineer (ISSE) to support DoD and IC programs.

You will provide cybersecurity engineering, architecture, vulnerability management, risk assessment, and RMF/NIST-aligned security compliance for complex enterprise and cloud information systems. The role requires extensive security engineering, vulnerability assessments, system design, and compliance in highly secure environments, with collaboration across systems,

Qualifications

• Active TS/SCI with NSA Full Scope Polygraph is required.
• Minimum 14 years of ISSE experience on large scope programs.
• Bachelor's in a related technical discipline; CISSP preferred or equivalent.
• DoD 8570.01-M IASAE II certification required.

Responsibilities

• Support ISSE activities for secure system design, accreditation, and sustainment.
• Conduct vulnerability management using enterprise tools (Tenable, Nessus).
• Perform security assessments of cloud and on-prem environments to identify weaknesses.
• Analyze findings and propose mitigations to reduce risk and improve posture.
• Collaborate with engineers across disciplines to integrate security throughout SDLC.

Skills

TS/SCI clearance

NSA polygraph

ISSE experience

Vulnerability assessment

RMF/NIST knowledge

Education

Bachelor's degree in CS/IA/ISSE

DoD 8570 IASAE II

CISSP certification

Tools

Tenable Security Center

Nessus

Security assessment tools

Job description

Momentum Engineering, Inc. seeks an experienced Information Systems Security Engineer (ISSE) to support DoD and IC programs.

You will provide cybersecurity engineering, architecture, vulnerability management, risk assessment, and RMF/NIST-aligned security compliance for complex enterprise and cloud information systems. The role requires extensive security engineering, vulnerability assessments, system design, and compliance in highly secure environments, with collaboration across systems,