Stigs Engineer Jobs

1 job found

1d ago

Information Systems Security Engineer (ISSE)

Aspetto, Inc. Guam

Guam

1d ago

Full time Information Security InfoSec NIST SP 800-53

Apply Now

Job Description

Aspetto, Inc. supports NAVFAC Marianas in Guam by building mission-focused cybersecurity capability across Facility-Related Control Systems (FRCS). As an Information Systems Security Engineer (ISSE), you will help execute and sustain the full RMF lifecycle (Steps 1–6), supporting system authorization activities, continuous monitoring, and compliance reporting. The role also participates in emergency readiness through the Marianas Cyber Emergency Response Team (CERT), including emergency essential and mission essential duties.

Responsibilities

Execute RMF Steps 1–6 in accordance with Department of the Navy and NAVFAC Echelon II guidance
Support development, achievement, maintenance, and tracking of Authorities to Operate (ATOs) for Facility-Related Control Systems
Develop and maintain cybersecurity policies, Standard Operating Procedures (SOPs), implementation plans, and supporting RMF documentation
Implement and assess security controls in accordance with NIST SP 800-53 and applicable Department of Defense requirements
Conduct vulnerability assessments using tools including ACAS, SCAP, Evaluate-STIG, and other approved assessment tools
Perform manual STIG and SRG validations
Develop, update, and maintain Plans of Action and Milestones (POA&Ms) within eMASS
Support System-Level Continuous Monitoring (SLCM) activities and ongoing cybersecurity compliance
Serve as Configuration Management Officer and participate in Configuration Control Board (CCB) activities
Support cybersecurity incident response and participate in the MAR CERT on-call rotation
Prepare and provide bi-weekly RMF status reports to the Information Systems Security Manager (ISSM)
Coordinate cybersecurity activities across multiple installations, including Naval Base Guam, Marine Corps Base Camp Blaz, and Andersen Air Force Base
Travel locally between supported installations as required

Required Experience and Qualifications

U.S. Citizenship required
Active Top Secret eligibility based on a Tier 5 investigation, or ability to meet clearance requirements prior to start
Minimum 5 years of professional Risk Management Framework (RMF) experience
Minimum 1 year specialized experience supporting Facility-Related Control Systems (FRCS), Industrial Control Systems (ICS), or Operational Technology (OT) environments
Experience with eMASS, ACAS, VRAM, Security Center, STIGs, SRGs, and cybersecurity vulnerability assessment tools
Working knowledge of NIST SP 800-53, DoD cybersecurity requirements, and RMF processes
Strong technical writing skills developing cybersecurity policies, procedures, assessment documentation, and compliance reports
Ability to work independently with minimal supervision
Ability to maintain all required professional certifications throughout employment

DoD 8140 Certification Requirements

Candidates must meet applicable DoD Manual 8140.03 Work Role 461 qualification requirements at the Intermediate or Advanced level
Examples of qualifying certifications may include:
Intermediate: CompTIA Security+, CCSP, CompTIA Cloud+, GICSP, GISF, GSEC
Advanced: CISSP-ISSEP, CompTIA CySA+, GSNA, GCSA, GCLD, CISSO, FITSP-O, RCCE Level 1
Candidates must maintain required certification status and complete applicable continuing professional development requirements, including a minimum of 20 CPD hours annually, when required

Physical and Work Location Requirements

Ability to stand and walk for extended periods
Ability to work on rough or uneven surfaces
Ability to climb ladders and access equipment within industrial or facility environments
Ability to lift and move IT or related equipment weighing up to 25 pounds
On-site position in Guam, GU (not eligible for remote work)
Must be willing to relocate to or currently reside in Guam
Must have reliable transportation for travel between supported installations
Must be available to participate in emergency response and on-call requirements

Benefits

401(k) matching
Dental insurance
Employee assistance program
Health insurance
Health savings account
Paid time off
Professional development assistance
Relocation assistance
Tuition reimbursement
Vision insurance

View full job page →

Get Stigs Engineer Jobs alerts

New Stigs Engineer Jobs, daily.