The ISSE/Cybersecurity Engineer works with program development and operations and maintenance teams to maintain continuous compliance with Risk Management Framework (RMF) and zero-trust principles, remediate critical vulnerabilities within policy timelines, and ensure the provenance of software artifacts delivered to production. The role applies knowledge of RMF processes, security requirements, and system infrastructure to coordinate with team members, the Authorizing Official, and the ISSM, keeping RMF documentation accurate and current throughout system development, deployment, and operations and maintenance. The engineer coordinates with ServiceNow system administrators to maintain software in accordance with security mandates, including testing and deploying Information Assurance Vulnerability Alerts for commercial off-the-shelf software. The position also coordinates with the Government on prioritizing and scheduling security patches, bug fixes, configuration updates, system upgrades, and performance improvements. As the CIO GRC RMF liaison, the engineer supports rapid exchange of SP FCAPS/FAB data to identify security issues and enable timely responses, and works with cybersecurity representatives and data owners to confirm that the platform can protect mission data's confidentiality, integrity, and availability.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Job Type
Full-time
Career Level
Mid Level