Information Systems Security Engineer (ISSE)

Enterprise Horizon Consulting Group•Washington, DC

17h

About The Position

Enterprise Horizon Consulting Group (EHCG) is a Woman-Owned Small Business specializing in IT Consulting which has successfully delivered key capabilities to the Navy, Army, and NASA over the past 20+ years. EHCG provides best in class services to its customers in the following areas: Business Systems Services; Business Intelligence; Data Analytics and Dashboarding; Enterprise Resource Planning (SAP) Implementation; Legacy System Optimization; Digital Transformation; Cloud Migration; Integration and Modernization; and Risk Management Framework Processes (RMF). Job Description Enterprise Horizon Consulting Group is seeking a highly motivated Information Systems Security Engineer (ISSE) to join our team in support of our DoD customer. The ISSE will be responsible for engineering, implementing, and maintaining cybersecurity controls to achieve and sustain an Authority to Operate (ATO) in accordance with DoD and federal requirements.

Requirements

Active Secret Security Clearance
Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field (or equivalent experience)
Experience supporting DoD or federal information systems
Strong knowledge of RMF, NIST cybersecurity standards, and DoD cybersecurity policies
Experience with system security engineering throughout the system development lifecycle (SDLC)
Experience with Enterprise Mission Assurance Support Service (eMASS)
Ability to analyze technical designs and identify security risks
Strong verbal and written communication skills
Exceptional technical writing and documentation skills

Nice To Haves

Familiarity with the RMF process for integration tools such as MuleSoft a plus

Responsibilities

Engineer and implement security controls to support system ATO and ongoing authorization
Lead and support Risk Management Framework (RMF) activities from system categorization through authorization and continuous monitoring
Develop, review and maintain ATO documentation including SSPs, SAPs, SARs, POA&Ms, and supporting artifacts
Map and implement security controls in accordance with NIST SP 800-53, DoDI 8510.01, and DoD cybersecurity policies
Support security control assessments and coordinate with Authorizing Officials (AOs) and assessors
Perform security engineering analysis to ensure system designs meet confidentiality, integrity, and availability (CIA) requirements
Conduct vulnerability assessments and support remediation efforts to reduce risk prior to and after ATO
Analyze system changes and assess security impact to maintain ATO posture
Support continuous monitoring activities, including vulnerability scanning, STIG compliance, and annual assessments
Utilize eMASS to manage RMF artifacts, control status, and ATO packages
Provide guidance on secure system configurations, hardening, and best practices
Support audits, inspections, and compliance reviews