This is a 6-month contract position for an Information System Security Engineer based in Salt Lake City, Utah.
Responsibilities
Execute and support RMF (Risk Management Framework) lifecycle activities including categorization, control selection, implementation, assessment, authorization, and continuous monitoring
Develop, maintain, and review RMF documentation such as System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and related security plans
Interpret and apply security controls from NIST SP 800-53, CNSSI 1253, and related guidance
Support implementation and validation of Security Technical Implementation Guides (STIGs) and other configuration baselines
Collaborate with cross-functional engineering teams (systems, software, hardware) to ensure security requirements are properly implemented
Interface with internal stakeholders, Authorizing Officials (AOs), and external assessors to support authorization efforts
Track and report compliance status, risks, and remediation activities to program leadership
Contribute to continuous monitoring strategies and ongoing system compliance
Travel up to 10% as needed
Qualifications
Required
One of the following educational and experience combinations
Bachelor's degree in cybersecurity, computer science, information systems, or related field with minimum 4 years of prior relevant experience
Graduate degree with minimum 2 years of prior related experience
Show the full description
Minimum 8 years of prior related experience in lieu of a degree
DoD Secret Clearance