Security Authorization Engineer Jobs

1 job found

1d ago

Cybersecurity Engineer

Nortex Cyber Solutions Fort George G Meade, MD

Fort George G Meade, MD

1d ago

Full time Cybersecurity Tools Government Security Standards Information Security

Apply Now

Job Description

Nortex Cyber Solutions is seeking a Cybersecurity Engineer / Information Systems Security Engineer (ISSE) to support security authorization, assessment, and continuous monitoring for mission-critical information systems. The position requires deep RMF expertise, strong documentation and traceability practices, and the ability to work within classified environments.

Location

Fort George G Meade, MD (onsite)

Role Responsibilities

Support the full Risk Management Framework (RMF) lifecycle for information systems seeking or maintaining authorization.
Develop, review, maintain, and update system security authorization packages and supporting bodies of evidence.
Apply and interpret security controls and requirements in accordance with NIST SP 800-53 and DoD Instruction 8510.01 (RMF for DoD IT).
Use security package management and governance tools such as eMASS and Xacta to develop, maintain, track, and manage authorization documentation.
Scope security assessments and conduct assessments of information systems undergoing accreditation/authorization or maintaining existing authorization.
Support preparation, coordination, and approval of Interim Authorizations to Test (IATTs) for systems requiring testing prior to full authorization.
Evaluate system configurations against applicable DISA Security Technical Implementation Guides (STIGs), CIS Benchmarks, and other security configuration standards.
Conduct and analyze vulnerability assessments using tools such as ACAS/SecurityCenter and Nessus.
Review vulnerability scan results, determine applicability and risk, track remediation activities, and support development and maintenance of Plans of Action and Milestones (POA&Ms) as applicable.
Coordinate with system engineers, developers, and other technical stakeholders to implement and validate security controls.
Support implementation of automated solutions for continuous monitoring of security controls, vulnerabilities, configurations, and related security requirements.
Identify opportunities to improve RMF, assessment, evidence collection, and continuous monitoring processes through automation.
Leverage AI-enabled tools when beneficial while maintaining enough cybersecurity and RMF expertise to independently understand, validate, and take responsibility for intended outcomes.
Maintain organized, accurate, and traceable documentation showing relationships between security requirements, implemented controls, assessment results, findings, remediation activities, and supporting evidence.
Participate in Agile development and engineering environments and work within SAFe Agile processes.
Communicate security risks, findings, and requirements clearly to both cybersecurity and engineering stakeholders.

Required Qualifications

Active TS/SCI clearance with CI Polygraph required at time of hire.
Ability to access required classified environments and security packages within NSA systems.
Strong working knowledge of DoD RMF and the complete authorization lifecycle.
Strong knowledge of NIST SP 800-53 security and privacy controls and DoDI 8510.01.
Experience developing, reviewing, and maintaining RMF authorization packages and supporting bodies of evidence.
Hands-on experience with eMASS and/or Xacta.
Strong understanding of DISA STIGs, CIS Benchmarks, system hardening, and security configuration requirements.
Experience using ACAS/SecurityCenter and Nessus for vulnerability scanning, analysis, and remediation support.
Experience scoping and conducting security assessments for systems undergoing or maintaining authorization.
Knowledge of the IATT process and experience supporting systems requiring authorization for testing.
Understanding of continuous monitoring requirements and approaches for validating security controls throughout the lifecycle.
Ability to work with technical teams to develop or implement automation supporting cybersecurity and continuous monitoring activities.
Familiarity with SAFe Agile or similar Agile environments.
Strong written and verbal communication skills.
Exceptional attention to detail, organization, documentation, and configuration management.
Ability to maintain clear traceability across security requirements, implementation details, assessment procedures, findings, and supporting evidence.

Technologies

Risk Management Framework (RMF)
NIST SP 800-53
DoD Instruction 8510.01
eMASS
Xacta
DISA Security Technical Implementation Guides (STIGs)
CIS Benchmarks
ACAS/SecurityCenter
Nessus
Plans of Action and Milestones (POA&Ms)
Interim Authorizations to Test (IATTs)
NSA environments
SAFe Agile

Education and Experience

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical field.
10+ years of relevant cybersecurity, information assurance, RMF, or systems security engineering experience.
Equivalent combinations of education, certifications, and directly relevant experience may be considered.

Preferred Qualifications

Experience supporting NSA, DoD, or Intelligence Community information systems.
Experience working directly with system owners, ISSMs, ISSOs, security control assessors, and Authorizing Official representatives.
Experience with continuous monitoring and automated security control validation.
Experience integrating security activities into CI/CD or DevSecOps environments.
Experience developing scripts, workflows, or other automation to improve security assessment, evidence collection, vulnerability management, or compliance processes.
Familiarity with AI-assisted cybersecurity or compliance workflows, with the technical expertise necessary to independently verify AI-generated outputs.
Relevant certifications such as Security+, CISSP, CAP/CGRC, CASP+/SecurityX, or equivalent.

Benefits

100% Company-paid medical insurance for employees
100% Company-paid dental and vision insurance
Competitive salary
Generous 401k employer contribution to your 401k with no required personal contribution and immediate vesting
Generous PTO and parental leave
Flexible work hours

Clearance Required for Start

Yes
Top Secret/SCI with CI Polygraph

Physical Requirements

Ability to remain seated and work at a computer for extended periods.
Ability to occasionally lift up to 15 pounds.
Ability to communicate effectively in person and through virtual collaboration tools.

View full job page →

Get Security Authorization Engineer Jobs alerts

New Security Authorization Engineer Jobs, daily.