Job Description
Defend the systems that power the Pacific mission
SOSi is seeking a talented Information System Security Engineer (ISSE) to lead cybersecurity engineering efforts supporting critical operations at Joint Base Pearl Harbor-Hickam. In this high-impact role, you'll drive RMF compliance, architect secure solutions, and help safeguard mission systems across a dynamic and evolving threat landscape. Join a collaborative cyber team where your expertise directly contributes to national security and operational readiness throughout the Indo-Pacific region.
Essential Job Duties:
- Design, review, and implement cybersecurity architecture and engineering solutions supporting enterprise and mission systems.
- Integrate security requirements into system design, development, testing, implementation, and sustainment activities.
- Support and lead RMF activities throughout the authorization lifecycle, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
- Develop, review, and maintain RMF documentation including System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms).
- Evaluate system changes, upgrades, and new capabilities to determine cybersecurity impacts and authorization requirements.
- Validate implementation of NIST SP 800-53 security controls and DISA Security Technical Implementation Guides (STIGs).
- Conduct cybersecurity architecture reviews, security engineering analyses, and technical risk assessments.
- Analyze ACAS, Tenable, Nessus, and SCAP assessment results and coordinate remediation efforts with system administrators and engineering teams.
- Develop and implement continuous monitoring strategies to maintain cybersecurity compliance and authorization status.
- Participate in Configuration Control Boards (CCBs), Technical Review Boards (TRBs), and engineering working groups.
- Provide technical guidance and cybersecurity recommendations to system owners, ISSOs, ISSMs, and senior leadership.
- Support cybersecurity inspections, Security Control Assessor (SCA) assessments, and Command Cyber Readiness Inspections.
- Evaluate interconnections, data flows, and system architectures to identify security risks and recommend mitigations.
- Track vulnerability remediation efforts and maintain POA&M activities to meet organizational and regulatory requirements.
- Support implementation and adoption of Zero Trust principles and cybersecurity modernization initiatives.
- Prepare technical reports, executive summaries, and briefing materials for leadership decision-making.