Information System Security Engineer III

Athena Technology Group•Philadelphia, PA

1d•Onsite

About The Position

We are seeking an Information System Security Engineer III (ISSE III) to support a Navy cybersecurity program. The selected candidate will provide advanced cybersecurity engineering support, capture and refine security requirements, and ensure those requirements are addressed through purposeful development, system configuration, vulnerability management, and implementation of security controls across multiple authorization packages. This position is contingent upon award of the contract.

Requirements

Active Secret Clearance.
Bachelor’s degree in computer science, information technology, or an equivalent STEM degree from an accredited college or university.
Minimum of seven (7) years of professional experience capturing and refining information security operational and security requirements and ensuring those requirements are properly addressed through purposeful development, configuration, and implementing security controls, configuration changes, software/hardware updates and patches, vulnerability scanning, and securing configurations.
Strong experience with RMF, A&A processes, eMASS, and vulnerability management activities.
IAT-III Certification including any of the following: CASP+CE, CCNP Security, CISA, CISSP (or Associate) GCED, GCIH, CCSP
Familiarity with NIST SP 800-37 Revision 2 (Risk Management Framework)

Nice To Haves

Experience supporting Department of the Navy or NAVSEA environments.
Strong background in system hardening, compliance validation, and cybersecurity engineering.
Excellent analytical, documentation, and communication skills.
ISC² Certified in Governance, Risk, and Compliance (CGRC) or equivalent

Responsibilities

Lead RMF lifecycle activities and support authorization and continuous monitoring efforts across multiple systems.
Capture and refine information security operational and security requirements.
Ensure security requirements are addressed through purposeful development, configuration, and implementation of security controls.
Lead configuration changes, software and hardware update activities, patching support, vulnerability scanning, and secure system configuration efforts.
Develop, review, and maintain cybersecurity documentation and authorization artifacts within eMASS.
Support remediation planning, POA&M tracking, and risk reduction activities.
Coordinate with government stakeholders, ISSOs, system administrators, and engineering teams to maintain system compliance and security posture.
Provide technical guidance and mentorship to junior cybersecurity personnel as needed.