Information System Security Engineer II

Athena Technology Group•Philadelphia, PA

1d•Onsite

About The Position

We are seeking an Information System Security Engineer II (ISSE II) to support a Navy cybersecurity program. The selected candidate will support cybersecurity engineering and Risk Management Framework (RMF) activities, including implementation and validation of security controls, vulnerability management, and continuous monitoring across multiple systems and authorization packages. This position is contingent upon award of the contract.

Requirements

Active Secret Clearance.
Bachelor’s degree in computer science, information technology, or an equivalent STEM degree from an accredited college or university.
Minimum of three (3) years of professional experience capturing and refining information security operational and security requirements and ensuring those requirements are properly addressed through purposeful development and configuration; and implementing security controls, configuration changes, software/hardware updates and patches, vulnerability scanning, and securing configurations.
Experience with RMF, A&A processes, eMASS, and vulnerability management activities.
IAT II Certification including any of the following CCNA-Security, CySA+, GCIP, GSEC, Security+ CE, CND, SSCP
Familiarity with NIST SP 800-37 Revision 2 (Risk Management Framework)

Nice To Haves

Experience supporting Department of the Navy or NAVSEA environments.
Familiarity with STIGMAN and related cybersecurity compliance tools.
Strong analytical, documentation, and communication skills.

Responsibilities

Support RMF lifecycle activities, including preparation, review, and maintenance of A&A artifacts.
Assist in capturing and refining information security operational and security requirements.
Support implementation and validation of security controls in accordance with applicable DoD and Navy requirements.
Conduct vulnerability scanning and remediation support using approved tools such as ACAS.
Maintain and update cybersecurity documentation and authorization artifacts within eMASS.
Apply STIGs, SRGs, patching actions, and secure configuration baselines.
Support POA&M tracking, configuration updates, and remediation efforts.
Coordinate with ISSOs, ISSEs, system administrators, and developers to maintain compliance and security posture.