About the Organization
Now is a great time to join Redhorse Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We’re looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets.
About the Role
Redhorse Corporation is seeking a motivated Senior Cybersecurity Engineer to join our National Security team focused on supporting a US Government customer, requiring deep expertise in the Risk Management Framework (RMF) and system accreditation. In this role, you will play a key part in helping knowledge graph-based data products receive an Authority to Operate (ATO) in various environments. Your work will directly support mission-critical initiatives in cyber forensics, financial forensics, and criminal investigations, ensuring data integrity, accessibility, and scalability. This position offers an excellent opportunity for growth in a collaborative environment where you’ll work with cutting-edge technologies to solve complex data challenges.
Key Responsibilities
- The ISSM will be the primary security point of contact for the assigned Information Systems (IS), responsible for maintaining the system's security posture and ensuring continuous compliance with all applicable government regulations and security controls.
- Authorization to Operate (ATO) Process: Serve as the Subject Matter Expert (SME) in managing the entire ATO lifecycle, from system categorization through monitoring and decommissioning. Ensure system security plans (SSPs) and supporting artifacts are accurate, comprehensive, and submitted in a timely manner.
- eMASS Management: Required to utilize the Enterprise Mission Assurance Support Service (eMASS) as the official RMF workflow and reporting tool. Responsibilities include system registration, control selection, artifact uploading, continuous monitoring activities, and generating required reports within the eMASS platform.
- NIST 800-53/53A Compliance: Oversee the implementation and assessment of security controls defined in NIST SP 800-53 (Security and Privacy Controls for Federal Information Systems and Organizations). Must be proficient in NIST SP 800-53A (Assessing Security and Privacy Controls) to accurately assess and validate control effectiveness and provide expert guidance on remediation activities.
- Security Documentation: Develop, review, and maintain all system security documentation, including System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), Contingency Plans, Incident Response Plans, and security control implementation evidence.
- Continuous Monitoring (ConMon): Establish and execute a robust ConMon strategy to ensure the ongoing security of the IS. Regularly review audit logs, vulnerability scans, and security alerts to identify and mitigate risks.
- Incident Response: Act as the primary security point of contact during security incidents, coordinating with the system owner, security operations center (SOC), and government stakeholders to ensure incidents are reported, contained, and resolved according to policy.
- Liaison: Serve as the technical security liaison between system development teams, operations staff, the Authorizing Official (AO), and the Customer’s security governance bodies.
Required Qualifications
- 7+ years of experience in Information System Security, with at least 3 years serving in an ISSM, ISSE, or IS Security Officer role supporting government systems. Active Top Secret (TS) Clearance is required.
- Technical Expertise:
- Extensive, demonstrable experience using eMASS for the complete RMF process is Mandatory.
- Expert-level understanding of the NIST Risk Management Framework (RMF) and its application to Department of Defense (DoD) or Federal systems.
- In-depth familiarity with NIST SP 800-53/53A controls, baselines, and assessment procedures.
- Certifications: Must possess a current DoD 8140 IAT Level III certification (e.g., CISSP, CASP+, CISM).
Preferred Qualifications
- Experience with other security tools, such as vulnerability scanners (e.g., Nessus, ACAS), Security Information and Event Management (SIEM) systems, and configuration management tools.
- Familiarity with GovCloud Security and secure DevSecOps practices.
Equal Opportunity Employer/Veterans/Disabled
Accommodations:
If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Talent Acquisition at
[email protected]Redhorse Corporation shall, in its discretion, modify or adjust the position to meet Redhorse’s changing needs.
This job description is not a contract and may be adjusted as deemed appropriate in Redhorse’s sole discretion.
