Senior Cybersecurity Engineer

Redhorse Corporation • Tampa, FL

8d

About The Position

Redhorse Corporation is seeking a motivated Senior Cybersecurity Engineer to join our National Security team focused on supporting a US Government customer, requiring deep expertise in the Risk Management Framework (RMF) and system accreditation. In this role, you will play a key part in helping knowledge graph-based data products receive an Authority to Operate (ATO) in various environments. Your work will directly support mission-critical initiatives in cyber forensics, financial forensics, and criminal investigations, ensuring data integrity, accessibility, and scalability. This position offers an excellent opportunity for growth in a collaborative environment where you’ll work with cutting-edge technologies to solve complex data challenges.

Requirements

• 7+ years of experience in Information System Security, with at least 3 years serving in an ISSM, ISSE, or IS Security Officer role supporting government systems. Active Top Secret (TS) Clearance is required.
• Technical Expertise:
• Extensive, demonstrable experience using eMASS for the complete RMF process is Mandatory.
• Expert-level understanding of the NIST Risk Management Framework (RMF) and its application to Department of Defense (DoD) or Federal systems.
• In-depth familiarity with NIST SP 800-53/53A controls, baselines, and assessment procedures.
• Certifications: Must possess a current DoD 8140 IAT Level III certification (e.g., CISSP, CASP+, CISM).

Nice To Haves

• Experience with other security tools, such as vulnerability scanners (e.g., Nessus, ACAS), Security Information and Event Management (SIEM) systems, and configuration management tools.
• Familiarity with GovCloud Security and secure DevSecOps practices.

Responsibilities

• The ISSM will be the primary security point of contact for the assigned Information Systems (IS), responsible for maintaining the system's security posture and ensuring continuous compliance with all applicable government regulations and security controls.
• Authorization to Operate (ATO) Process: Serve as the Subject Matter Expert (SME) in managing the entire ATO lifecycle, from system categorization through monitoring and decommissioning. Ensure system security plans (SSPs) and supporting artifacts are accurate, comprehensive, and submitted in a timely manner.
• eMASS Management: Required to utilize the Enterprise Mission Assurance Support Service (eMASS) as the official RMF workflow and reporting tool. Responsibilities include system registration, control selection, artifact uploading, continuous monitoring activities, and generating required reports within the eMASS platform.
• NIST 800-53/53A Compliance: Oversee the implementation and assessment of security controls defined in NIST SP 800-53 (Security and Privacy Controls for Federal Information Systems and Organizations). Must be proficient in NIST SP 800-53A (Assessing Security and Privacy Controls) to accurately assess and validate control effectiveness and provide expert guidance on remediation activities.
• Security Documentation: Develop, review, and maintain all system security documentation, including System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), Contingency Plans, Incident Response Plans, and security control implementation evidence.
• Continuous Monitoring (ConMon): Establish and execute a robust ConMon strategy to ensure the ongoing security of the IS. Regularly review audit logs, vulnerability scans, and security alerts to identify and mitigate risks.
• Incident Response: Act as the primary security point of contact during security incidents, coordinating with the system owner, security operations center (SOC), and government stakeholders to ensure incidents are reported, contained, and resolved according to policy.
• Liaison: Serve as the technical security liaison between system development teams, operations staff, the Authorizing Official (AO), and the Customer’s security governance bodies.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 251-500 employees