layiq
worthy; deserving; fitting; suitable.
A role, opportunity, or path that merits attention, time, and pursuit.
Loading LAYIQ…Job opportunity
Saalex
Newport, RI, US
Source: Saalex careers · View original posting
From Saalex's posting. “We” and “our” refer to the employer.
Saalex is seeking a Information Systems Security Engineer (RMF) in Newport, RI to support the Naval Undersea Warfare Center Division Newport (NUWCDIVNPT). The selected candidate will support Assessment and Authorization (A&A) activities and assist in maintaining Authorizations to Operate (ATOs) for enterprise and Research, Development, Test & Evaluation (RDT&E) systems and networks.
Support Assessment and Authorization (A&A) activities to maintain Authorizations to Operate (ATOs) in accordance with DoD and Department of the Navy RMF requirements.
Support cybersecurity compliance, security assessments, continuous monitoring activities, and information assurance efforts across Navy enterprise and RDT&E systems and networks.
Develop, review, and maintain RMF package documentation, including Security Plans, Risk Assessments, POA&Ms, architecture diagrams, asset inventories, and system/site policies and procedures.
Perform security control assessments in accordance with NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, CNSSI 1253, and applicable Navy cybersecurity guidance.
Execute Security Assessment Plans, review Security Test Reports, identify security deficiencies, and support risk mitigation activities.
Utilize cybersecurity tools including eMASS, ACAS, STIG Viewer, and STIG OSS Manager to assess, document, and monitor compliance.
Develop and maintain cybersecurity documentation including Contingency Plans, Contingency Plan Tests, Business Impact Analyses, and other required security artifacts.
Provide guidance on Navy RMF policies, DoD cybersecurity directives, NAVSEA business rules, and cybersecurity compliance requirements while supporting process improvement initiatives.
Provide RMF and eMASS guidance to team members and stakeholders and support cybersecurity training efforts as needed.
Attend stakeholder meetings, track action items, coordinate follow-up activities, and collaborate with government and contractor personnel to support successful A&A outcomes.
Other duties as assigned or required.
LAYIQ is an independent job-discovery service. This listing does not imply a partnership with or endorsement by the employer. Review the original posting for current details and availability.
Employer posted: