Information Systems Security Engineer

Redwood Software•Remote - Virginia, VA

22h

About The Position

We are seeking a highly technical Information Systems Security Engineer (ISSE) to support a U.S. Navy program through the Risk Management Framework (RMF), Authority to Operate (ATO), system hardening, vulnerability remediation, and day-to-day security engineering activities. This is a hands-on engineering position. The ideal candidate is comfortable working directly on Linux servers, virtualization infrastructure, network infrastructure, and security monitoring platforms to implement, troubleshoot, validate, and maintain security controls. The successful candidate will work closely with system administrators, network engineers, and cybersecurity personnel to identify security gaps and implement practical technical solutions that satisfy Navy RMF/ATO requirements. This position is not primarily focused on strategy, program planning, configuration management, or developing project/VM plans. The focus is on technical execution and engineering.

Requirements

Bachelor's degree in cybersecurity, computer science, information technology, engineering, or a related technical field, or equivalent professional experience.
7+ years of hands-on experience in cybersecurity, systems engineering, network engineering, or information assurance.
Demonstrated experience supporting RMF and ATO activities within a DoD environment.
Strong hands-on experience with RHEL/Linux administration and security hardening.
Experience implementing and validating DISA STIG requirements.
Hands-on experience with VMware environments.
Hands-on experience with Cisco Catalyst switching and Cisco ACI.
Hands-on experience with Splunk and Cribl or comparable enterprise logging technologies.
Strong understanding of vulnerability scanning, remediation, and security validation.
Strong Linux command-line and troubleshooting skills.
Ability to troubleshoot complex infrastructure and security issues across operating-system, virtualization, network, and logging layers.
Active DoD Secret clearance required.
Ability to obtain and maintain any additional program-specific access requirements.
U.S. Citizenship Required

Nice To Haves

Experience supporting U.S. Navy or DoD mission systems.
Experience with Navy RMF processes and ATO assessments.
Experience with eMASS.
Experience interpreting and implementing DISA STIGs across multiple technology platforms.
Experience with Tenable/Nessus or comparable vulnerability-scanning platforms.
Experience with PowerShell, Bash, Python, or other scripting languages used for security automation.
Experience troubleshooting authentication, access control, auditing, encryption, and system logging requirements.
Experience integrating infrastructure logs into Splunk through Cribl.
Experience with SCAP/STIG compliance tooling.
Security+ certification
CISSP certification
CySA+ certification
Linux-related certification
VMware certification
Cisco certification

Responsibilities

Perform hands-on security engineering in support of Navy RMF and ATO requirements.
Implement and validate technical security controls across servers, virtualization, network, and logging environments.
Harden systems in accordance with applicable DISA STIGs, Navy security requirements, and RMF control requirements.
Perform vulnerability remediation, including analysis of findings, root-cause identification, remediation, and validation.
Configure, secure, troubleshoot, and validate RHEL/Linux systems.
Support security hardening and troubleshooting of VMware environments.
Perform security configuration and troubleshooting of Cisco Catalyst and Cisco ACI infrastructure.
Support centralized security logging and monitoring using Splunk and Cribl.
Analyze system and security logs to troubleshoot issues and validate security requirements.
Support collection and validation of technical evidence required for RMF/ATO activities.
Translate RMF security requirements into practical technical implementations.
Work directly with infrastructure teams to remediate security deficiencies.
Automate repetitive security engineering and validation tasks where appropriate.