Information Security Engineer

Information Security Engineer

About the Role

We are seeking a Information Security Engineer with strong experience in federal cybersecurity, FISMA, and the NIST Risk Management Framework (RMF). This role supports both security engineering efforts and compliance activities, helping ensure systems meet federal security requirements.

What You’ll Do

FISMA / NIST RMF Compliance

• Implement and monitor NIST SP 800-53 controls.
• Develop and maintain System Security Plans (SSPs), POA&Ms, and continuous monitoring documentation.
• Support A&A activities, including control assessments, evidence collection, and ATO package preparation.
• Contribute to security policy and procedure development.

Security Engineering & Operations

• Advise on security tool configuration (SIEM, vulnerability scanners, IDS/IPS).
• Analyze vulnerabilities, recommend remediation, and track POA&M items.
• Support incident response planning and documentation aligned with federal requirements.
• Review system and network changes for security impacts.

Auditing & Reporting

• Assist with internal and external audits, including OIG and independent assessors.
• Maintain continuous monitoring processes to ensure ongoing control effectiveness.
• Produce compliance reports and security posture updates for leadership and Authorizing Officials.

Qualifications

• 5 years of experience in Federal IT security.
• At least 2 years working directly with FISMA and NIST RMF.
• Bachelor’s degree in Computer Science, IT, or related field, or equivalent experience.
• Relevant cybersecurity certifications (e.g., Security , CySA , CASP , CISSP, CAP).