Information Systems Security Engineer

Information Systems Security Engineer  

This is an on-site role at Joint Base Pearl/Hickam in Honolulu, HI.

As the Information Systems Security Engineer, you will propose, implement and enforce operational security policies and ensure solutions are in place to limit security risks. 

You will maintain the operational security posture to ensure Information Systems (IS) security policies, standards, and procedures are established and followed, and will support the efforts to obtain systems approval and Authority to Operate for new, innovative systems that will be entirely new to the procuring government agencies. 

We serve the Department of Defense, financial institutions, healthcare, state, local and federal government, and other industries along with their customers. 

If You Join Us, You Will: 

• Work with a team to provide a comprehensive risk management plan to address, identify, assess, and provide prioritization of risks (including how risks will be recorded, reported and mitigated). Plans shall include the full range of risks that could impact the project including but not limited to resources, access, physical and cyber security, and unplanned events.
• Implement STIG baselines and other industry standards to the in scope systems.
• Identify high risk factors and develop a mitigation plan to reduce or eliminate the risk.
• Develop and maintain system Plan of Actions and Milestones (POA&M) to address individual risks, prioritize risk actions, and detail an integrated risk action plan for each risk identified.
• Perform Risk Assessments and document findings in each system's POA&M
• Understand NIST, Committee for National Security Systems (CNSS), DoD/DON Communications Task Orders (CTOs, TASKORDS), and Information Assurance Vulnerability Management (IAVMs), and Security Technical Implementation Guides (STIGs)
• Prepare for and conduct RMF-related briefings at meetings with internal and external representatives

ISSE Candidate will have sufficient knowledge to provide support for the following: 

• Assemble and review all required documentation as outlined by the ISSM and CNIC for the RMF packages.
• Tailor security controls out of National Institute of Standards and Technology (NIST) SP 800-53 rev 4 for the systems.
• Assist with updating policy and documentation along with maintaining compliance with National Institute of Standards (NIST) SP 800-53 rev 4 throughout the RMF lifecycle.
• Update and help implement the status of all security controls.
• Assess and implement security controls, Security Technical Implementation Guides (STIGs), and Assured Compliance Assessment Solution (ACAS) scans in accordance with governing policies.
• Process and maintain compliance by leveraging Nessus, STIGs, and Security Content Automation Protocol (SCAP) files.

• Assist in managing identified vulnerabilities.

Basic Qualifications: 

• Five (5) years of experience is required as an ISSO including experience in at least one (1) of the following areas: knowledge of current security tools, hardware/software security implementation, communication protocols or encryption techniques/tools. 
• Thorough knowledge of NIST security guidelines.
• Bachelor of Science from an accredited college or university in Computer Science or related field may be substituted for four (4) years of experience. 
• Experience with Navy Information Assurance
• Additional Security Clearance may be required

Benefits: 

As a Full-time RVCM employee, you can also expect these additional benefits:

• Fully remote work within the U.S.
• Exemplary Medical, Dental, and Vision coverage
• Health Care and Dependent Care Savings Accounts
• Group Term Life Insurance auto-enrollment (for employees who participate in health insurance coverage with RVCM)
• 401(k) with company matching after 1 year of service. Accounts are 100% vested immediately
• Universal Leave: Accrue up to 15 days in your first year of service, increasing to 18 days between thirteen months and three years of service, 21 days between four and nine years of service, and 24 days after 10 or more years of service
• Eligible to roll over 240 hours annually
• A company-provided laptop plus a $1,000 Home Office Bonus upon hire.
• Paid parental leave for the care of a newborn or adopted child is compensated at 100% of the employee's regular, straight-time weekly pay.
• Continuous Education and training, including financial support for acquiring certifications
• Mentorship Programs

Our employees come from a broad spectrum of backgrounds, each with a unique story. Diversity, Equity, and Inclusion are at the heart of who we are, and everyone should feel valued and free to bring their most authentic self to work - without fear, without judgment. Creating this environment is essential not only for our organization but also for our customers and our communities. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.