Saalex

Engineering and IT services for defense

Information Systems Security Engineer - RMF

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeNewport, RI, USA

About the Job

Requirements

A minimum of two years of cybersecurity experience supporting RMF and Assessment and Authorization activities is required.
Experience developing and maintaining RMF packages, including Security Plans, Risk Assessments, POA&Ms, and supporting documentation is required.
Experience with eMASS, ACAS, STIG Viewer, and cybersecurity compliance activities is required.
Working knowledge of NIST standards, RMF, DISA STIGs, and continuous monitoring requirements is required.
Ability to manage multiple priorities and communicate effectively with technical and non-technical stakeholders is required.
CompTIA Security+ or another DoD 8570/8140 IAM or IAT Level II certification is required.
A bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field is preferred; equivalent combinations of education, certifications, military experience, and professional cybersecurity experience may be considered.
An active Secret clearance is required, and candidates must be U.S. citizens to obtain a clearance.

Responsibilities

Support Assessment and Authorization activities to maintain Authorizations to Operate in accordance with DoD and Department of the Navy RMF requirements.
Support cybersecurity compliance, security assessments, continuous monitoring activities, and information assurance efforts across Navy enterprise and RDT&E systems and networks.
Develop, review, and maintain RMF package documentation, including Security Plans, Risk Assessments, POA&Ms, architecture diagrams, asset inventories, and system/site policies and procedures.
Perform security control assessments in accordance with NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, CNSSI 1253, and applicable Navy cybersecurity guidance.
Execute Security Assessment Plans, review Security Test Reports, identify security deficiencies, and support risk mitigation activities.
Use eMASS, ACAS, STIG Viewer, and STIG OSS Manager to assess, document, and monitor compliance.
Develop and maintain cybersecurity documentation, including Contingency Plans, Contingency Plan Tests, Business Impact Analyses, and other required security artifacts.
Provide guidance on Navy RMF policies, DoD cybersecurity directives, NAVSEA business rules, and cybersecurity compliance requirements while supporting process improvement initiatives.
Provide RMF and eMASS guidance to team members and stakeholders and support cybersecurity training efforts as needed.
Attend stakeholder meetings, track action items, coordinate follow-up activities, and collaborate with government and contractor personnel to support successful A&A outcomes.
Perform other duties as assigned or required.

Desired Qualifications

Experience supporting Navy, NAVSEA, or other DoD cybersecurity programs.
Experience conducting security control assessments and supporting ATO efforts.
Familiarity with cybersecurity process improvement initiatives and RMF policy development.
Experience providing cybersecurity training, mentoring, or technical guidance.
CAP, CASP+, CISSP, or another advanced cybersecurity certification.

Information Systems Security Engineer (RMF)

Saalex · Newport, United States · Full-time · Posted 2026-08-25

Salary: USD 60,000–70,000

Workplace: on_site

Department: C104

Description

Saalex is seeking a Information Systems Security Engineer (RMF) in Newport, RI to support the Naval Undersea Warfare Center Division Newport (NUWCDIVNPT). The selected candidate will support Assessment and Authorization (A&A) activities and assist in maintaining Authorizations to Operate (ATOs) for enterprise and Research, Development, Test & Evaluation (RDT&E) systems and networks.

Position Type: Full-Time

Salary: $60k-$70k annually (depending on experience)

Work Location: Full-time onsite

Essential Functions:

Support Assessment and Authorization (A&A) activities to maintain Authorizations to Operate (ATOs) in accordance with DoD and Department of the Navy RMF requirements.
Support cybersecurity compliance, security assessments, continuous monitoring activities, and information assurance efforts across Navy enterprise and RDT&E systems and networks.
Develop, review, and maintain RMF package documentation, including Security Plans, Risk Assessments, POA&Ms, architecture diagrams, asset inventories, and system/site policies and procedures.
Perform security control assessments in accordance with NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, CNSSI 1253, and applicable Navy cybersecurity guidance.
Execute Security Assessment Plans, review Security Test Reports, identify security deficiencies, and support risk mitigation activities.
Utilize cybersecurity tools including eMASS, ACAS, STIG Viewer, and STIG OSS Manager to assess, document, and monitor compliance.
Develop and maintain cybersecurity documentation including Contingency Plans, Contingency Plan Tests, Business Impact Analyses, and other required security artifacts.
Provide guidance on Navy RMF policies, DoD cybersecurity directives, NAVSEA business rules, and cybersecurity compliance requirements while supporting process improvement initiatives.
Provide RMF and eMASS guidance to team members and stakeholders and support cybersecurity training efforts as needed.
Attend stakeholder meetings, track action items, coordinate follow-up activities, and collaborate with government and contractor personnel to support successful A&A outcomes.
Other duties as assigned or required.

Requirements

Required:

Minimum of two (2) years of cybersecurity experience supporting RMF and Assessment & Authorization (A&A) activities.
Experience developing and maintaining RMF packages, including Security Plans, Risk Assessments, POA&Ms, and supporting documentation.
Experience with eMASS, ACAS, STIG Viewer, and cybersecurity compliance activities.
Working knowledge of NIST standards, RMF, DISA STIGs, and continuous monitoring requirements.
Ability to manage multiple priorities and communicate effectively with technical and non-technical stakeholders.
CompTIA Security+ or other DoD 8570/8140 IAM or IAT Level II certification required.

Desired:

Experience supporting Navy, NAVSEA, or other DoD cybersecurity programs.
Experience conducting security control assessments and supporting ATO efforts.
Familiarity with cybersecurity process improvement initiatives and RMF policy development.
Experience providing cybersecurity training, mentoring, or technical guidance.
CAP, CASP+, CISSP, or other advanced cybersecurity certification.

Education:

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field preferred. Equivalent combination of education, certifications, military experience, and professional cybersecurity experience may be considered.

Security Clearance:

Active Secret clearance required. Requirements to obtain a clearance include US Citizenship, security investigation, etc.

Benefits

Employer Paid Health Care Plans for Employees & Family
Retirement Plan (401k, IRA)
Life Insurance (Basic, Voluntary & AD&D)
Paid Time Off (Vacation, Sick & Public Holidays)
Short Term & Long Term Disability
Training & Development
Wellness Resources
Stock Option Benefit

Apply

Apply at Saalex

About the Company

Saalex

Engineering and IT services for defense

Saalex Solutions provides engineering and IT services focused on defense and government clients. It supports test range operations and management, engineering and logistics, data analytics and business intelligence, and IT services. The company differentiates itself as a Service-Disabled Veteran-Owned organization with extensive government experience, prime and subcontracting capabilities, and a nationwide footprint with offices in California, Florida, and Washington. Its goal is to help national defense and other agencies carry out complex operations reliably by delivering practical, technically capable services and data-driven solutions tailored to mission needs.

Company size: 51-200
Company stage: Not listed
Total funding: Not listed
Headquarters: Camarillo, CA
Founded: 1999

Recently Posted Jobs

Explore more opportunities at Saalex

See more jobs