Apply on Employer Site

Enterprise Horizon Consulting Group · 3 weeks ago

Information Systems Security Engineer (ISSE)

Washington, DC

Contract

Onsite

Mid Level

Enterprise Horizon Consulting Group (EHCG) is a Woman-Owned Small Business specializing in IT Consulting, providing key capabilities to the Navy, Army, and NASA. They are seeking a highly motivated Information Systems Security Engineer (ISSE) to engineer, implement, and maintain cybersecurity controls to achieve and sustain an Authority to Operate (ATO) for their DoD customer.

ConsultingInformation ServicesInformation Technology

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Engineer and implement security controls to support system ATO and ongoing authorization

Lead and support Risk Management Framework (RMF) activities from system categorization through authorization and continuous monitoring

Develop, review, and maintain ATO documentation including SSPs, SAPs, SARs, POA&Ms, and supporting artifacts

Map and implement security controls in accordance with NIST SP 800-53, DoDI 8510.01, and DoD cybersecurity policies

Support security control assessments and coordinate with Authorizing Officials (AOs) and assessors

Perform security engineering analysis to ensure system designs meet confidentiality, integrity, and availability (CIA) requirements

Conduct vulnerability assessments and support remediation efforts to reduce risk prior to and after ATO

Analyze system changes and assess security impact to maintain ATO posture

Support continuous monitoring activities, including vulnerability scanning, STIG compliance, and annual assessments

Utilize eMASS to manage RMF artifacts, control status, and ATO packages

Provide guidance on secure system configurations, hardening, and best practices

Support audits, inspections, and compliance reviews

Qualification

Active Secret Security ClearanceIAT Level III certificationRMF knowledgeNIST cybersecurity standardsEMASS experienceSystem security engineeringTechnical design analysisCommunication skillsTechnical writing skills