Information Systems Security Engineer (ISSE)

Precise Systems, Inc.•Crane, IN

1d•Onsite

About The Position

Precise Systems is seeking an Information Systems Security Engineer (ISSE) to support our customer in Crane, Indiana. This position provides cybersecurity engineering support for tactical information systems, applications, networks, and platform systems supporting Expeditionary Electromagnetic Warfare Division efforts. The ISSE will support the engineering, documentation, assessment, and authorization activities required to establish and maintain compliant, operationally effective systems in accordance with DoD and Navy cybersecurity requirements. This role is ideal for a candidate who understands both the technical and procedural sides of cybersecurity. The successful candidate will help engineer and document security controls, support RMF package development and submission, assess vulnerabilities, manage POA&Ms, and sustain systems through authorization and continuous monitoring. The position requires strong judgment, initiative, organization, and the ability to operate effectively in a fast-paced environment with sensitive information and mission-critical systems. This role requires in-person support.

Requirements

3+ years of information assurance, cybersecurity engineering, ISSO/ISSE, or related DoD cyber compliance experience.
Experience supporting the Risk Management Framework (RMF) for DoD information systems.
Experience developing or updating RMF/security authorization documentation such as SSP, RAR, SAP, SAR, POA&M, IRP, CP, SOPs, and CMPs.
Working knowledge of FISMA, FIPS, NIST, DoDI 8510.01, DoDI 8500.01, and related cybersecurity guidance.
Experience performing or supporting vulnerability scanning, STIG review, assessment, and remediation analysis.
Familiarity with tools such as Tenable Nessus, SCC, and related assessment/compliance tooling.
Ability to assess evolving threats, communicate technical risk clearly, and support practical remediation in an operational environment.
Strong written and verbal communication skills and ability to work effectively with engineers, ISSOs, ISSMs, administrators, and Government stakeholders.
Must be able to obtain and maintain a Secret security clearance.
U.S. Citizenship is required.

Nice To Haves

Current experience providing DoD ISSO/ISSE support in a Navy or tactical systems environment.
Experience supporting systems hosted in cloud, Agile, or DevSecOps environments.
Familiarity with DITPR-DON, DADMS, eMASS-equivalent workflows, and Navy authorization package routing.
Experience supporting continuous monitoring, patch management, configuration management, and ATO sustainment activities.
CISSP
CASP+
CISA
CEH
CISM

Responsibilities

Provide cybersecurity engineering support for tactical information systems that are not owned by NSWC Crane or NMCI, including applications, networks, and platform systems.
Develop, update, and maintain cybersecurity documentation required for the certification, accreditation, authorization, and sustainment of information systems. Core artifacts may include the System Security Plan (SSP), Risk Assessment Report (RAR), Security Assessment Plan (SAP), Security Assessment Report (SAR), POA&M, Incident Response Plan (IRP), Contingency Plan, SOPs, Remediation Plans, and Configuration Management Plan (CMP).
Support the Risk Management Framework (RMF) process and demonstrate working knowledge of the RMF submission flow, including: System categorization and boundary definition, Security control selection and tailoring, Control implementation and technical evidence collection, Package development and submission for assessment, Support to security control assessment and adjudication, Development and maintenance of POA&Ms, Authorization package updates in support of ATO decisions, Transition to continuous monitoring and reauthorization support as required.
Perform technical efforts required for the certification, accreditation, and authorization of tactical systems, including vulnerability assessment using Tenable Nessus, SCAP Compliance Checker (SCC), STIG evaluation, and manual checklist development.
Analyze system, network, database, cloud, and application security posture and recommend cost-effective safeguards and remediation strategies.
Proactively create, monitor, and update POA&Ms to ensure identified weaknesses are tracked and resolved within required timelines.
Assist with development and maintenance of the information system’s authorization to operate (ATO) and overall compliance posture.
Maintain hardware and software inventories, support configuration management, and assess impacts of proposed changes to maintain security posture.
Support incident response and contingency planning activities, including documentation updates and technical coordination.
Ensure systems are maintained in DITPR-DON and that software applications are properly registered in DADMS, as applicable.
Support continuous monitoring of vulnerabilities through patching, security updates, policy changes, mitigation development, and security status reporting to stakeholders.
Participate in configuration control and change-review activities affecting cybersecurity posture, in coordination with program, engineering, and security personnel.