Senior Information Security Engineer

🔥 3 minutes ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ASRC Federal

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2003

🎖️ Defense

🚀 Aerospace

🏛️ Government

Defense • Aerospace • Government

ASRC Federal is a wholly-owned subsidiary of Arctic Slope Regional Corporation that provides federal government contracting services across space, civilian, defense & intelligence, national security, and health markets. It delivers engineering solutions, digital operations and IT modernization, software, applications & analytics, supply chain management & logistics, infrastructure operations, and professional services to support missions such as NASA space programs, FAA aviation safety/operations, Air Force industrial support, cyber defense, and base/resiliency operations. The company operates a family of businesses whose earnings support ASRC’s more than 14,000 Iñupiaq shareholders and employs roughly 9,000 people.

📋 Description

• Serve as the primary cybersecurity and privacy advisor to System Owners for assigned systems • Lead RMF activities, including development and maintenance of System Security and Privacy Plans (SSPPs), authorization packages, risk documentation, and supporting artifacts • Ensure systems maintain Authorization to Operate (ATO) through assessment support, continuous monitoring, and compliance with NIST RMF, FISMA, and federal security requirements • Assess security risks, validate security controls, and coordinate remediation of vulnerabilities and Plans of Action and Milestones (POA&Ms) • Maintain system inventories, security documentation, contingency plans, configuration management plans, and privacy documentation • Collaborate with ISSMs, System Owners, Security Control Assessors, and technical teams to integrate security throughout the system lifecycle • Monitor system security posture, review vulnerability and compliance scan results, and support continuous authorization initiatives • Provide cybersecurity guidance, develop security policies and procedures, and deliver security awareness training • Support security engineering, certification and accreditation activities, and implementation of security controls across systems • Recommend process improvements and automation opportunities to enhance RMF and cybersecurity operations

🎯 Requirements

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related field • Minimum 5–7 years of experience supporting information assurance, cybersecurity, RMF, or information system security, or an equivalent combination of education and experience • Experience supporting federal cybersecurity programs and the NIST Risk Management Framework (RMF) • Experience developing and maintaining RMF documentation, authorization packages, and Governance, Risk and Compliance (GRC) tools • Strong knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FIPS 199, and federal privacy requirements • Experience supporting Authorization to Operate (ATO), Continuous ATO (cATO), or Continuous Authorization efforts • Strong analytical, communication, documentation, and stakeholder engagement skills • Certified Information Systems Security Professional (CISSP) • Certified in Governance, Risk and Compliance (CGRC) or Certified Cloud Security Professional (CCSP) • Experience supporting U.S. federal civilian agencies, preferably the USPTO • Experience with continuous monitoring, vulnerability management, and security automation • Familiarity with cloud security, DevSecOps, and continuous authorization initiatives • Knowledge of privacy compliance activities, including Privacy Threshold Assessments (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notices (SORNs)

🏖️ Benefits

• Remote work arrangement