A bachelor's degree in Computer Science, Information Technology, STEM, or a closely related technical field; relevant experience may substitute for education requirements per contract terms.
At least 7 years of experience in information system security, cybersecurity engineering, or information assurance roles, including demonstrated experience with systems of similar complexity and sensitivity.
An active Department of Defense 8570.01-M IAT Level III baseline certification, such as CISSP, CASP+ CE, CCNP Security, CISA, GCED, or GCIH.
An active Secret security clearance.
Proven experience implementing the Department of Defense Risk Management Framework for information technology systems, including RMF Steps 1–6, eMASS, and supporting Assessment and Authorization.
Detailed understanding of National Institute of Standards and Technology, Department of Defense, Department of the Navy, and NAVSEA cybersecurity policies, security controls, and audit requirements.
Technical expertise in vulnerability assessment, configuration and patch management, compliance testing, continuous monitoring, and cybersecurity documentation.
Proficiency with security management tools and vulnerability scanning platforms such as ACAS and Nessus, plus familiarity with cloud, virtualization, and modern network architectures.
Ability to develop technical documents and briefings for diverse audiences.
U.S. citizenship.
Responsibilities
Lead and perform security engineering and integration activities for Navy information technology.
Develop, document, and maintain Risk Management Framework artifacts, including System Security Plans, Security Assessment Reports, Plans of Action and Milestones, and hardware and software inventories.
Conduct security categorization, security controls selection and implementation, vulnerability assessments, and risk assessments.
Plan and execute security testing, continuous monitoring, configuration management, and audit readiness for assigned systems.
Apply and validate Security Technical Implementation Guides, Security Requirements Guides, and other relevant Department of Defense and Navy cybersecurity compliance standards.
Identify, document, and mitigate cybersecurity vulnerabilities; lead vulnerability scanning, analysis, remediation, and compliance activities.
Coordinate and support Assessment and Authorization efforts, including obtaining and sustaining Authorizations to Operate and Interim Authorizations to Test, and support Plans of Action and Milestones.
Develop and update information assurance and cybersecurity policy and procedure documentation; participate in creating program plans, quality assurance processes, and technical reports.
Advise and collaborate with cross-functional project teams and government stakeholders to implement secure solutions and resolve Risk Management Framework, audit, and operational security issues.
Provide technical mentorship and guidance to junior Information System Security Engineers and supporting personnel.
Ensure security engineering activities and deliverables support CDRL reporting and Department of Defense accountability requirements.
Remain current with changes in Department of Defense, Department of the Navy, and NAVSEA cybersecurity and information assurance regulations, policies, and technology.
Desired Qualifications
An advanced degree in a relevant discipline.
Prior experience supporting Navy or Department of Defense agencies or shipboard system cybersecurity.
Familiarity with eCRAFT, WAWF, and other Department of Defense reporting and management tools.
Experience leading teams through system Authorization to Operate processes and preparing CDRL deliverables.
Kinaras Solutions is recruiting pre-award for
Information System Security Engineer (ISSE) III
Position Overview The Information System Security Engineer (ISSE) III will serve as a senior cybersecurity engineering professional in direct support of the Naval Surface Warfare Center Philadelphia Division (NSWCPD), as part of the Information Technology Operations Division. This position is responsible for providing comprehensive cybersecurity engineering and Risk Management Framework (RMF) services across complex Navy and DoD information systems and networks.
Key Responsibilities
Lead and perform security engineering and integration activities for Navy IT.
Develop, document, and maintain RMF artifacts such as System Security Plans (SSPs), Security Assessment Reports, Plans of Action and Milestones (POA&Ms), and hardware/software inventories.
Conduct security categorization, security controls selection and implementation, vulnerability and risk assessments.
Plan and execute security testing, continuous monitoring, configuration management, and audit readiness for assigned systems.
Apply and validate Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), and other relevant DoD/Navy cybersecurity compliance standards.
Identify, document, and mitigate cybersecurity vulnerabilities. Lead vulnerability scanning, analysis, remediation, and compliance activities.
Coordinate and support Assessment and Authorization (A&A) efforts, including obtaining and sustaining Authorizations to Operate (ATO), Interim Authorizations to Test (IATT), and support for POA&Ms.
Develop and update IA and cybersecurity policy and procedure documentation. Participate in the creation of program plans, quality assurance processes, and technical reports.
Advise and collaborate with cross-functional project teams and government stakeholders to implement secure solutions and resolve RMF, audit, and operational security issues.
Provide technical mentorship and guidance to junior ISSEs and supporting personnel.
Ensure that all security engineering activities and deliverables support CDRL/reporting and DoD accountability requirements.
Remain current with changes in DoD, DoN, and NAVSEA cybersecurity/IA regulations, policies, and technology.
Required Qualifications
Education: Bachelor’s degree in Computer Science, Information Technology, STEM, or a closely related technical field. (Relevant experience may substitute for education requirements per contract terms.)
Experience: Minimum of 7 years’ experience in information system security, cybersecurity engineering, or IA roles, including demonstrated experience with systems of similar complexity and sensitivity as those described in the SOW.
Certification: Must possess and maintain a DOD 8570.01-M IAT Level III baseline certification (e.g., CISSP, CASP+ CE, CCNP Security, CISA, GCED, or GCIH).
Clearance: Must have an active secret security clearance
Knowledge & Skills:
Proven experience implementing the DoD Risk Management Framework (RMF) for IT systems, including RMF Step 1–6 activities, eMASS, and supporting A&A.
Detailed understanding of NIST, DoD, DoN, and NAVSEA cybersecurity policies, security controls, and audit requirements.
Strong technical expertise in vulnerability assessment, configuration/patch management, compliance testing, continuous monitoring, and cybersecurity documentation.
Proficiency with security management tools, vulnerability scanning platforms (e.g., ACAS, Nessus), and familiarity with cloud, virtualization, and modern network architectures.
Exceptional written and verbal communication skills, including the ability to develop technical documents and briefings for diverse audiences.
Desired Qualifications
Advanced degree in a relevant discipline.
Prior experience supporting Navy/DoD agencies or shipboard system cybersecurity.
Familiarity with eCRAFT, WAWF, and other DoD reporting/management tools.
Experience leading teams through system ATO processes and CDRL deliverable preparation.
Location: NSWCPD Philadelphia, PA; with occasional travel possible as required by the program.
Work Authorization: U.S. citizenship required.
Equal Opportunity Employer Disclosure:
Kinaras Solutions, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, protected veteran status, disability status, or any other characteristic protected by federal, state, or local law. We are committed to fostering a diverse and inclusive workplace.
If you require a reasonable accommodation to apply for a position or to participate in the application or interview process, please contact [email protected].
Applicants selected may be subject to a background investigation and must meet eligibility requirements for access to classified information or employment as a contractor assigned to the U.S. government, as required.