Senior Information Security Engineer

🔥 0 minutes ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ASRC Federal

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2003

🏛️ Government

🎖️ Defense

🔒 Cybersecurity

Government • Defense • Cybersecurity

ASRC Federal is a U. S. -based government services and technology company. It provides mission-focused solutions — including systems engineering, IT and enterprise services, cybersecurity, intelligence and analytic support, logistics, and program management — to federal customers such as the Department of Defense, Homeland Security, and other civil and national security agencies. ASRC Federal is the federal contracting subsidiary of Arctic Slope Regional Corporation (an Alaska Native Corporation) and operates as a prime contractor on a range of government programs.

📋 Description

• Serve as the primary cybersecurity and privacy advisor to System Owners for assigned systems • Lead RMF activities, including development and maintenance of System Security and Privacy Plans (SSPPs), authorization packages, risk documentation, and supporting artifacts • Ensure systems maintain Authorization to Operate (ATO) through assessment support, continuous monitoring, and compliance with NIST RMF, FISMA, and federal security requirements • Assess security risks, validate security controls, and coordinate remediation of vulnerabilities and Plans of Action and Milestones (POA&Ms) • Maintain system inventories, security documentation, contingency plans, configuration management plans, and privacy documentation • Collaborate with ISSMs, System Owners, Security Control Assessors, and technical teams to integrate security throughout the system lifecycle • Monitor system security posture, review vulnerability and compliance scan results, and support continuous authorization initiatives • Provide cybersecurity guidance, develop security policies and procedures, and deliver security awareness training • Support security engineering, certification and accreditation activities, and implementation of security controls across systems • Recommend process improvements and automation opportunities to enhance RMF and cybersecurity operations

🎯 Requirements

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related field • Minimum 5–7 years of experience supporting information assurance, cybersecurity, RMF, or information system security, or an equivalent combination of education and experience • Experience supporting federal cybersecurity programs and the NIST Risk Management Framework (RMF) • Experience developing and maintaining RMF documentation, authorization packages, and Governance, Risk and Compliance (GRC) tools • Strong knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FIPS 199, and federal privacy requirements • Experience supporting Authorization to Operate (ATO), Continuous ATO (cATO), or Continuous Authorization efforts • Strong analytical, communication, documentation, and stakeholder engagement skills • Required Certified Information Systems Security Professional (CISSP) certification • Required Certified in Governance, Risk and Compliance (CGRC) or Certified Cloud Security Professional (CCSP) certification