Cybersecurity Engineer II

INFORMATION SYSTEMS SOLUTIONS, INC•Charleston, SC

just now•Onsite

About The Position

Information Systems Solutions, Inc, has an immediate opening for a Cybersecurity Engineer II to join our rapidly growing team. The Cybersecurity Engineer II will provide cyber services and solutions, technical support, and management support for ATC Division Programs (NPP). Traveling to onsite locations in Antarctica is possible.

Requirements

Secret Clearance Level
Security+ CE, GIAC Security Essentials Certification (GSEC), Security Certified Network Professional (SCNP), System Security Certified Practitioner (SSCP), SecurityX or CISSP (highly preferred) certifications (IAT Level II)
Bachelor’s degree in Cybersecurity, Computer Science, Electrical or Electronics Engineering
Five (5) years or more of experience
A strong working knowledge of the Risk Management Framework (RMF), including relevant NIST requirements, and demonstrated experience developing and maintaining Assessment and Authorization (A&A) documentation. This includes System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Impact Analyses, and control traceability artifacts.
Solid familiarity with continuous monitoring, security assessment processes, authorization lifecycle activities, Governance Risk and Compliance (GRC) platforms, vulnerability management, security scanning tools (such as ACAS), regulatory requirements, secure configuration baselines, Security Technical Implementation Guides (STIGs), and remediation tracking.
Ability to evaluate technical implementations and effectively align security controls with operational, technical, and management requirements.

Nice To Haves

ACAS, eMASS or equivalent certification

Responsibilities

Support the Risk Management Framework process across the system lifecycle.
Prepare, update, and maintain authorization documentation, including System Security Plans, Standard Operating Procedures, Policies, and Plans of Action and Milestones.
Conduct Security Impact Analysis by identifying control gaps, security risks, and compliance issues, then recommend remediation actions.
Coordinate with system owners, engineers, ISSOs, assessors, and leadership to collect evidence and resolve findings.
Track remediation activities and validate closure of security weaknesses.
Support continuous monitoring activities, including control reviews, status reporting, and periodic updates.
Review vulnerability scan results and help align remediation efforts with compliance requirements.
Ensure systems meet applicable regulatory, contractual, and organizational security standards.
Assist with audit preparation, responses to assessors, and recurring compliance reviews.
Communicate risk posture, assessment results, and recommendations to stakeholders in clear business and technical terms.