Information System Security Engineer II

Athena Technology Group • Philadelphia, PA

3d

About The Position

Athena Technology Group, Inc. is seeking an Information System Security Engineer II to support a Navy cybersecurity program. The position supports cybersecurity engineering and Risk Management Framework (RMF) activities, including implementing and validating security controls, vulnerability management, and continuous monitoring across multiple systems and authorization packages. The position is contingent upon award of the contract.

The role involves supporting RMF lifecycle activities and A&A documentation, helping capture and refine information security requirements, implementing and validating controls under applicable DoD and Navy requirements, and supporting vulnerability scanning and remediation. The engineer maintains cybersecurity documentation and authorization artifacts in eMASS, applies security configuration baselines and updates, tracks POA&Ms, and coordinates with cybersecurity and technical colleagues to maintain compliance and security posture.

The position is described as being in a normal office environment and requires sitting, standing, near acuity, speaking with colleagues and customers, listening, sight, and use of hands and fingers. The employer describes performance bonuses and annual salary reviews, insurance coverage, a 401(k) plan with company match, professional growth opportunities, and a collaborative and inclusive work environment.

Requirements

• Active Secret Clearance.
• Bachelor’s degree in computer science, information technology, or an equivalent STEM degree from an accredited college or university.
• At least three years of professional experience capturing and refining information security operational and security requirements and ensuring they are addressed through purposeful development and configuration.
• At least three years of professional experience implementing security controls, configuration changes, software and hardware updates and patches, vulnerability scanning, and secure configurations.
• Experience with RMF, A&A processes, eMASS, and vulnerability management activities.
• IAT II certification, including one of the following: CCNA-Security, CySA+, GCIP, GSEC, Security+ CE, CND, or SSCP.
• Familiarity with NIST SP 800-37 Revision 2 (Risk Management Framework).

Nice To Haves

• Experience supporting Department of the Navy or NAVSEA environments.
• Familiarity with STIGMAN and related cybersecurity compliance tools.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Support RMF lifecycle activities, including preparation, review, and maintenance of A&A artifacts.
• Assist in capturing and refining information security operational and security requirements.
• Support implementation and validation of security controls in accordance with applicable DoD and Navy requirements.
• Conduct vulnerability scanning and provide remediation support using approved tools such as ACAS.
• Maintain and update cybersecurity documentation and authorization artifacts within eMASS.
• Apply STIGs, SRGs, patching actions, and secure configuration baselines.
• Support POA&M tracking, configuration updates, and remediation efforts.
• Coordinate with ISSOs, ISSEs, system administrators, and developers to maintain compliance and security posture.

Benefits

• Performance bonuses and annual salary reviews
• Health, dental, and vision insurance
• Short-Term Disability, Long-Term Disability, and Life Insurance
• 401(k) plan with company match
• Opportunities for professional growth and development
• A collaborative and inclusive work environment

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level