Information Systems Security Engineer

Position Title: Combat Systems Cybersecurity Engineer / Information Systems Security Engineer (ISSE)

Location: Naval Undersea Warfare Center Division Newport (NUWCDIVNPT), Newport, RI

Work Location: Hybrid / On-site

Position Overview

We are seeking an experienced Information Systems Security Engineer (ISSE) to provide cybersecurity engineering, Risk Management Framework (RMF), and information assurance support for U.S. Navy Submarine Combat Systems and associated tactical networks, weapons systems, and platform interfaces at NUWCDIVNPT.

The selected candidate will support the cybersecurity engineering, assessment, authorization, integration, testing, and sustainment of submarine combat systems, including AN/BYG-1 Combat Control Systems, Submarine Warfare Federated Tactical Systems (SWFTS), and associated Non-Propulsion Electronic Systems (NPES).

This position requires collaboration with combat systems engineers, cybersecurity personnel, system administrators, program offices, and government stakeholders to ensure submarine combat systems meet Department of Defense (DoD), Department of the Navy (DoN), and applicable cybersecurity requirements while maintaining operational effectiveness and mission readiness.

Key Responsibilities

Perform Information Systems Security Engineer (ISSE) functions supporting the cybersecurity engineering, integration, testing, modernization, and sustainment of U.S. Navy submarine combat systems, including AN/BYG-1, SWFTS, and associated tactical networks and system interfaces.

Support Department of Defense (DoD) Risk Management Framework (RMF) activities, including security control implementation, assessment, authorization, and continuous monitoring in accordance with applicable DoD, DoN, and NIST cybersecurity requirements.

Develop, review, and maintain cybersecurity authorization documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting artifacts within eMASS.

Conduct vulnerability assessments, security configuration reviews, and compliance evaluations using DoD-approved tools, including ACAS, SCAP, STIG Viewer, and applicable Security Technical Implementation Guides (STIGs).

Analyze cybersecurity vulnerabilities, assess operational risks, recommend remediation strategies, and coordinate corrective actions with engineering teams to maintain system security and operational readiness.

Evaluate cybersecurity requirements and security control implementations across submarine combat systems, including weapons control, sonar, electronic warfare, imaging, navigation, and associated Non-Propulsion Electronic Systems (NPES).

Support cybersecurity engineering and assessments associated with combat system modernization, Technical Alterations (TEMPALTs), Pre-Installation Check-Outs (PICOs), System Operational Verification Tests (SOVTs), and other integration and acceptance testing activities.

Assess cybersecurity impacts associated with hardware, software, network, and system configuration changes, ensuring compliance with established security requirements and approved system baselines.

Support Information Assurance Vulnerability Management (IAVM) activities, including vulnerability identification, remediation tracking, risk assessments, and compliance reporting.

Develop and maintain cybersecurity engineering documentation, technical reports, security assessments, risk mitigation plans, and system configuration baselines.

Coordinate with ISSMs, ISSOs, Security Control Assessors (SCAs), system engineers, and government stakeholders to resolve cybersecurity findings and support Authorization to Operate (ATO) requirements.

Participate in technical reviews, engineering working groups, system testing events, and cybersecurity assessments to ensure cybersecurity requirements are integrated throughout the system engineering lifecycle.

Required Qualifications and Skills

Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, Systems Engineering, or a related technical discipline. Significant relevant DoD cybersecurity or submarine combat systems experience may be considered in lieu of a degree.

Demonstrated experience performing cybersecurity engineering, information assurance, RMF, or ISSE functions within DoD or U.S. Navy environments.

Working knowledge of DoD RMF processes, NIST SP 800-53 security controls, STIG implementation, vulnerability management, and cybersecurity authorization requirements.

Experience developing, reviewing, or maintaining cybersecurity documentation and authorization artifacts, including SSPs, POA&Ms, security control assessments, and risk assessments.

Familiarity with cybersecurity assessment and compliance tools such as ACAS, SCAP, STIG Viewer, eMASS, or equivalent DoD-approved tools.

Understanding of network security, operating system security, system hardening, vulnerability assessment, and secure configuration management.

Knowledge of systems engineering principles and the integration of cybersecurity requirements into complex hardware, software, and networked system architectures.

Ability to analyze technical cybersecurity findings, assess operational risks, and develop practical mitigation recommendations for mission-critical systems.

Strong technical writing, communication, and collaboration skills, including the ability to interface with government customers, engineering teams, and cybersecurity stakeholders.

Proficiency with Microsoft Office applications, including Word, Excel, and PowerPoint.

Current DoD 8140 IAT Level II qualification applicable to assigned cybersecurity work roles, such as Security or other approved credentials as applicable.

U.S. Citizenship and an active Secret level Department of Defense security clearance.

Preferred Qualifications

Direct experience supporting U.S. Navy submarine combat systems, including AN/BYG-1 Combat Control Systems, SWFTS architecture, or associated tactical networks and system interfaces.

Experience performing ISSE or cybersecurity engineering functions within NUWCDIVNPT, Naval Sea Systems Command (NAVSEA), or other Navy combat systems programs.

Familiarity with submarine combat system components, including weapons control, torpedo and missile systems, launchers, sonar, electronic warfare, imaging, navigation, and associated NPES equipment.

Experience supporting submarine land-based laboratories, system integration facilities, or operational submarine platforms.

Experience conducting cybersecurity evaluations during combat system modernization, TEMPALT installations, PICOs, SOVTs, and related testing activities.

Knowledge of Navy cybersecurity policies, technical authorities, system authorization processes, and platform-specific security requirements.

Experience supporting security control validation, vulnerability remediation, cybersecurity configuration management, and continuous monitoring of tactical or embedded systems.

Experience working with Windows, Linux, network infrastructure, virtualization technologies, and embedded or specialized tactical computing environments.

Experience supporting classified information systems and mission-critical environments where cybersecurity requirements must be balanced with operational availability and system performance.