Information System Security Engineer (ISSE), Journeyman

KAIROS Inc•Saint Inigoes Shores, MD

4d•$80,000 - $90,000•Hybrid

About The Position

KAIROS, Inc is searching for an energetic, experienced, and highly motivated Information System Security Engineer (ISSE), Journeyman, to join our team. This position will work a hybrid schedule with at a minimum of two days a week on site work at St. Inigoes, MD. Established in July 2013, KAIROS, Inc. is a growing Woman Owned Small Business (WOSB) providing full life cycle Cybersecurity, Program Management, Engineering, Logistics, Additive Manufacturing, and Training and Education services focused on optimizing customers’ program performance and mission through proven methodologies and ethical practices. Our headquarters is in California, MD near Naval Air Station Patuxent River. We offer competitive salaries and benefits with outstanding growth potential. This position will perform cybersecurity analysis and support required for Risk Management Framework (RMF) Assessment and Authorization (A&A) packages supporting the Airborne Systems Integration (ASI) and Combat Identification Systems (IDS) Divisions at Webster Outlying Field (WOLF). The candidate, serving in the role of Information System Security Engineer (ISSE), will plan, implement, upgrade, or monitor security measures for the protection of tactical systems and information.

Requirements

Strong facilitation skills when communicating results of findings
Well organized and a strong attention to detail
Strong customer relations, analytics, and documentation skills
Self-starter, highly motivated, strong work ethic with a commitment to quality
Microsoft office suite proficiency, i.e., Word, Excel, PowerPoint
Ability to work within a challenging, fast-paced, team-oriented environment
Ability to work independently
Ability to multi-task and meet competing, deliverable deadlines
Detail oriented
Excellent interpersonal and customer service skills
Excellent verbal and written communication skills to provide clear status and/or adequately communicate issues
Ability to adapt to evolving technology
Bachelor’s degree in cybersecurity, computer science, IT, or another related field (required).
At least one (1) of the following certifications required:
Security + CE
CGRC (formerly CAP)
CASP+ CE
CISSP
Three (3) to seven (7) years of experience with RMF and A&A package development (required).
Experience with eMASS tool (required).
This position is subject to a government security investigation and must meet eligibility requirements for access to classified information. In order to complete the requirements for government security clearance investigation you must be a U.S. Citizen and be able to complete the full background investigation. This position requires an Active Secret Security Clearance. Candidate must have the ability to obtain a Top-Secret Security Clearance.

Nice To Haves

Experience with security/validation testing tools to include vulnerability scanners (Nessus) and DISA STIGs (desired).
Experience with Navy RMF Process Guide and Standard Operating Procedures (SOPs) (desired).
Experience applying RMF/cybersecurity to tactical systems (desired).
Experience working in a DoD environment (Contractor/Civilian/Military) (desired).

Responsibilities

Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies.
Ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure.
Manage all aspects of the RMF process from start to finish and support accreditation package development through customer acceptance.
Fully understand and execute all RMF steps necessary for creating A&A packages in accordance with DoD, Defense Information Systems Agency (DISA), and Federal cybersecurity requirements.
Perform ACAS scans and complete Security Technical Implementation Guides (STIGs) on the systems or networks under test, as required.
Develop and maintain required RMF artifacts.
Monitor and maintain system Enterprise Mission Assurance Support Service (eMASS) records.
Conduct Cybersecurity testing analysis and provide overall vulnerability and risk assessment reports.
Draft, track and monitor Plan of Action and Milestones (POA&Ms).
Work closely with the Information Systems Security Manager (ISSM), assigned Information System Security Engineer(s) and System Administrators to ensure system compliance with Federal and DoD regulations, and cybersecurity best practices.
Prepare detailed descriptions of issues, status updates, recommendations, and reports for all levels of the organization.
Serve as the system’s primary action officer with regards to cybersecurity.