Information Systems Security Engineer (ISSE)

Aspetto, Inc. supports NAVFAC Marianas in Guam by building mission-focused cybersecurity capability across Facility-Related Control Systems (FRCS). As an Information Systems Security Engineer (ISSE), you will help execute and sustain the full RMF lifecycle (Steps 1–6), supporting system authorization activities, continuous monitoring, and compliance reporting. The role also participates in emergency readiness through the Marianas Cyber Emergency Response Team (CERT), including emergency essential and mission essential duties.

Responsibilities

• Execute RMF Steps 1–6 in accordance with Department of the Navy and NAVFAC Echelon II guidance
• Support development, achievement, maintenance, and tracking of Authorities to Operate (ATOs) for Facility-Related Control Systems
• Develop and maintain cybersecurity policies, Standard Operating Procedures (SOPs), implementation plans, and supporting RMF documentation
• Implement and assess security controls in accordance with NIST SP 800-53 and applicable Department of Defense requirements
• Conduct vulnerability assessments using tools including ACAS, SCAP, Evaluate-STIG, and other approved assessment tools
• Perform manual STIG and SRG validations
• Develop, update, and maintain Plans of Action and Milestones (POA&Ms) within eMASS
• Support System-Level Continuous Monitoring (SLCM) activities and ongoing cybersecurity compliance
• Serve as Configuration Management Officer and participate in Configuration Control Board (CCB) activities
• Support cybersecurity incident response and participate in the MAR CERT on-call rotation
• Prepare and provide bi-weekly RMF status reports to the Information Systems Security Manager (ISSM)
• Coordinate cybersecurity activities across multiple installations, including Naval Base Guam, Marine Corps Base Camp Blaz, and Andersen Air Force Base
• Travel locally between supported installations as required

Required Experience and Qualifications

• U.S. Citizenship required
• Active Top Secret eligibility based on a Tier 5 investigation, or ability to meet clearance requirements prior to start
• Minimum 5 years of professional Risk Management Framework (RMF) experience
• Minimum 1 year specialized experience supporting Facility-Related Control Systems (FRCS), Industrial Control Systems (ICS), or Operational Technology (OT) environments
• Experience with eMASS, ACAS, VRAM, Security Center, STIGs, SRGs, and cybersecurity vulnerability assessment tools
• Working knowledge of NIST SP 800-53, DoD cybersecurity requirements, and RMF processes
• Strong technical writing skills developing cybersecurity policies, procedures, assessment documentation, and compliance reports
• Ability to work independently with minimal supervision
• Ability to maintain all required professional certifications throughout employment

DoD 8140 Certification Requirements

• Candidates must meet applicable DoD Manual 8140.03 Work Role 461 qualification requirements at the Intermediate or Advanced level
• Examples of qualifying certifications may include:
• Intermediate: CompTIA Security+, CCSP, CompTIA Cloud+, GICSP, GISF, GSEC
• Advanced: CISSP-ISSEP, CompTIA CySA+, GSNA, GCSA, GCLD, CISSO, FITSP-O, RCCE Level 1
• Candidates must maintain required certification status and complete applicable continuing professional development requirements, including a minimum of 20 CPD hours annually, when required

Physical and Work Location Requirements

• Ability to stand and walk for extended periods
• Ability to work on rough or uneven surfaces
• Ability to climb ladders and access equipment within industrial or facility environments
• Ability to lift and move IT or related equipment weighing up to 25 pounds
• On-site position in Guam, GU (not eligible for remote work)
• Must be willing to relocate to or currently reside in Guam
• Must have reliable transportation for travel between supported installations
• Must be available to participate in emergency response and on-call requirements

Benefits

• 401(k) matching
• Dental insurance
• Employee assistance program
• Health insurance
• Health savings account
• Paid time off
• Professional development assistance
• Relocation assistance
• Tuition reimbursement
• Vision insurance