Security Engineer

• Own the RMF lifecycle: system categorization, control tailoring (NIST 800-53r5), evidence development, POA&M management, and AO briefings
• Maintain eMASS records, packages, and artifacts; drive continuous monitoring cadence
• Lead meeting DoD and organizational compliance obligations
• Design, implement, and mature SP and enclave security controls (boundary protections, identity/access, logging, incident response, vulnerability & patch management)
• Ensure STIG/SRG compliance (DISA guidance) and maintain situational awareness using ACAS, Nessus, and other compliance scanning tools
• Map and validate inherited controls from AWS GovCloud, ensuring IL5 isolation is properly documented
• Ensure IS security measures align with applicable DoD and federal cybersecurity policies
• Draft, review, and maintain cybersecurity policies, SOPs, and technical documentation
• Oversee audit log monitoring, analysis, and reporting to meet DoD and organizational requirements
• Act as primary interface with Authorizing Officials (AOs), Security Control Assessors (SCAs), auditors, partners, and mission owners
• Translate risk posture, timelines, and remediation progress into executive-ready briefings
• Support Configuration/Change Assurance Board (CAB) activities and provide risk-based recommendations
• Supervise and mentor ISSO staff; establish operating cadence, SLAs, and dashboards
• Prepare for SCA-V assessments and drive remediation through closure

Senior Manager, DoD Information System Security

Cybersecurity SME

Information Security Supervisor

Analyst III – Information Security

Cybersecurity Engineer

Senior Manager, Cybersecurity Risk Management