Information System Security Engineer III

Athena Technology Group•Philadelphia, PA

About The Position

Athena Technology Group, Inc. is seeking an Information System Security Engineer III to support a Navy cybersecurity program. The role provides advanced cybersecurity engineering support, captures and refines security requirements, and ensures those requirements are addressed through development, system configuration, vulnerability management, and implementation of security controls across multiple authorization packages. The position is contingent upon award of the contract. The successful candidate will lead Risk Management Framework (RMF) lifecycle activities and support authorization and continuous monitoring across multiple systems. The role also includes maintaining cybersecurity documentation and authorization artifacts in eMASS, supporting remediation and risk-reduction work, coordinating with government and technical stakeholders, and providing guidance to junior cybersecurity personnel as needed.

Requirements

Active Secret Clearance.
Bachelor’s degree in computer science, information technology, or an equivalent STEM degree from an accredited college or university.
At least seven years of professional experience capturing and refining information security operational and security requirements and ensuring they are addressed through development, configuration, security controls, configuration changes, software and hardware updates and patches, vulnerability scanning, and secure configurations.
Strong experience with RMF, A&A processes, eMASS, and vulnerability management activities.
IAT-III certification, including one of the following: CASP+CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP.
Familiarity with NIST SP 800-37 Revision 2 (Risk Management Framework).

Nice To Haves

Experience supporting Department of the Navy or NAVSEA environments.
Strong background in system hardening, compliance validation, and cybersecurity engineering.
Excellent analytical, documentation, and communication skills.
ISC² Certified in Governance, Risk, and Compliance (CGRC) or equivalent.

Responsibilities

Lead RMF lifecycle activities and support authorization and continuous monitoring efforts across multiple systems.
Capture and refine information security operational and security requirements.
Ensure security requirements are addressed through purposeful development, configuration, and implementation of security controls.
Lead configuration changes, software and hardware update activities, patching support, vulnerability scanning, and secure system configuration efforts.
Develop, review, and maintain cybersecurity documentation and authorization artifacts within eMASS.
Support remediation planning, POA&M tracking, and risk reduction activities.
Coordinate with government stakeholders, ISSOs, system administrators, and engineering teams to maintain system compliance and security posture.
Provide technical guidance and mentorship to junior cybersecurity personnel as needed.