Overview VTG is seeking a Information Systems Security Engineer in Herndon, VA. What will you do? Primary/Sole information system security engineer responsible for providing complete security awareness, guidance and support while implementing and coordinating a full suite of information assurance assessment options to validate the security posture of MIDs systems. MID currently has twelve (12) systems in the accreditation cycle at various Risk Management Framework (RMF) levels. The systems span across multiple (4) enclaves. Do you have what it takes? * Managing the full life cycle of security accreditations for all of MIDs systems utilizing Risk Management Framework (RMF) * Creating and maintaining the security Body of Evidence (BoE) for each system in XACTA. In addition, also includes capturing screen shots and all other forms of evidence to meet security requirements * Effectively engage MID's Information System Security Manager (ISSM) to ensure security compliance of systems * Executing and maintaining Rapid7 security scans for each system across all enclaves. Scans must be executed every 90 days and uploaded into RoadRunner * Continuous Monitoring - Plan of Action & Milestones (POAMs) - Working with engineers to resolve formal security findings from the security assessment and/or the scans, and maintain the POAM. The POAM items are identified/tracked in the XACTA for each system. * Ensuring that plans, architectures, and designs of new IT solutions conform to applicable INFOSEC policies and standards, based on policies, threat and acceptable risk * Track all work utilizing JIRA Minimum Requirements: The ISSE in this role should be a senior ISSE with a broad range of experience and thorough understanding of the Agency's accreditation and authorization paradigm. * Significant experience with leading the A&A effort of information systems through the entire RMF process, from registration to continuous monitoring * Thorough knowledge and understanding of the Agency's Assessment & Authorization (A&A) Process - RMF * Solid understanding and experience with XACTA * Experience executing security scans and uploading them into RoadRunner, the Agency's Cyber Security Data Tracking & Collection tool * TS/SCI with Poly required