Senior Cybersecurity Engineer / Information System Security Engineer (ISSE)

Great Waters Federal is part of the Seneca Nation Group (SNG) portfolio of companies. SNG is Seneca Holdings' federal government contracting business that meets mission-critical needs of federal civilian, defense, and intelligence community customers. Our portfolio comprises multiple subsidiaries that participate in the Small Business Administration 8(a) program. To learn more about SNG, visit the website and follow us on LinkedIn. Our team of talented individuals is what makes us successful. To support our team, we provide a balanced mix of benefits and programs. Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan. One of our fundamental principles is to offer competitive health and welfare benefits to our team members, providing coverage and care for you and your family. Full-time employees working at least 30 hours a week on a regular basis are eligible to participate in our benefits and paid leave programs. We pride ourselves on our collaborative work environment and culture, which embraces our mission of providing financial and non-financial benefits back to the members of the Seneca Nation. Great Waters Federal is seeking a highly skilled and experienced Senior Cybersecurity Engineer / Information System Security Engineer (ISSE) to support cybersecurity engineering, security operations, vulnerability management, and continuous monitoring activities within Departent of Defense (DoD) information systems. The ideal candidate will possess a minimum of 10 years of relevant experience and demonstrate extensive hands-on technical expertise in vulnerability assessment and remediation, security configuration management, system hardening, endpoint protection, and enterprise systems administration. This position requires a cybersecurity professional capable of independently identifying, assessing, mitigating, and remediating security vulnerabilities while maintaining compliance with applicable DoD cybersecurity requirements, National Institute of Standards and Technology (NIST) security standards, and organizational security policies. The Senior Cybersecurity Engineer will collaborate with Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), system administrators, network engineers, and other technical stakeholders to maintain the security and operational readiness of mission-critical information systems. Roles and Responsibilities include, but are not limited to: Cybersecurity Engineering and Risk Management Framework (RMF) - Implement and maintain technical security controls in accordance with the NIST Risk Management Framework (RMF) and NIST Special Publication 800-53. - Support Information Security Continuous Monitoring (ISCM) activities in accordance with NIST SP 800-137. - Provide technical engineering support throughout the RMF authorization lifecycle. Assess the effectiveness of implemented security controls and identify technical compliance deficiencies. - Develop and implement corrective actions to address security control weaknesses. - Support the development and maintenance of System Security Plans (SSPs), security control implementation statements, assessment evidence, and Plans of Action and Milestones (POA&Ms). - Evaluate proposed system changes to determine cybersecurity impacts and maintain approved security configuration baselines. Provide technical evidence and remediation support for Authority to Operate (ATO) activities. - Collaborate with ISSOs and ISSMs to ensure continuous compliance with applicable security requirements. Vulnerability Assessment, Management, and Remediation - Install, configure, administer, maintain, and troubleshoot Tenable Nessus vulnerability scanners. Administer and manage Tenable Security Center (Tenable.sc), including scanner integration, scan repositories, policies, credentials, and reporting. Conduct authenticated and unauthenticated vulnerability assessments across enterprise information systems. - Configure and manage automated vulnerability scanning schedules and assessment policies. Analyze vulnerability findings, assess associated risks, and prioritize remediation efforts based on severity, exploitability, and operational impact. - Develop and implement vulnerability mitigation and remediation strategies. - Coordinate with system administrators, engineers, and system owners to resolve identified security weaknesses. - Perform follow-up vulnerability scans to validate remediation effectiveness. Maintain vulnerability tracking records and produce technical reports documenting findings, remediation status, and residual risk. Support vulnerability management activities across Windows Server, Red Hat Enterprise Linux, and AWS environments. DISA STIG Compliance and System Hardening - Implement and enforce applicable Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs). - Conduct automated and manual security compliance assessments using eSTIG tools, Security Content Automation Protocol (SCAP) scanning utilities, and approved assessment tools. - Analyze STIG findings and implement appropriate technical remediation measures. - Develop, implement, and maintain secure configuration baselines for supported operating systems and enterprise applications. Identify and investigate configuration deviations and implement corrective actions. Document compliance findings, remediation activities, and approved security deviations. - Validate system hardening and remediation effectiveness through automated scanning and manual verification. - Support cybersecurity inspections, audits, and continuous monitoring requirements. Ensure systems maintain compliance with applicable DoD security configuration standards. Endpoint Security and HBSS Administration - Administer, configure, maintain, and troubleshoot Host-Based Security System (HBSS) infrastructure and applicable successor endpoint security technologies. - Manage endpoint security policies, agent deployments, software updates, and system health monitoring. - Administer endpoint security management platforms, including Trellix/McAfee ePolicy Orchestrator (ePO), as applicable. - Investigate endpoint security alerts and coordinate appropriate corrective actions. - Ensure endpoint protection configurations comply with applicable DoD security requirements. - Support endpoint security infrastructure upgrades, configuration changes, and operational troubleshooting. - Monitor endpoint protection effectiveness and resolve agent communication, policy enforcement, and system compliance issues. Systems Administration and Configuration Management - Administer, configure, secure, and troubleshoot Red Hat Enterprise Linux (RHEL) and Microsoft Windows Server operating systems. Perform operating system installation, configuration, patch management, security hardening, and maintenance. Implement and maintain approved system configuration baselines. - Conduct security impact assessments for proposed system and infrastructure changes. - Support enterprise configuration management and change control processes. - Identify and resolve operating system vulnerabilities, misconfigurations, and security weaknesses. - Maintain technical documentation, system configuration records, and standard operating procedures. - Collaborate with infrastructure engineering teams to ensure secure deployment and reliable operation of enterprise systems. - Ensure system configurations remain compliant with organizational security policies and applicable DoD requirements. AWS Cloud Security - Support cybersecurity engineering and security compliance activities within Amazon Web Services (AWS) environments. Implement and maintain secure AWS configurations in accordance with organizational and applicable federal cybersecurity requirements. - Support cloud vulnerability management, identity and access management, security monitoring, and configuration assessments. - Identify cloud security misconfigurations and implement appropriate remediation measures. - Support security integration between on-premises infrastructure and cloud-hosted systems. - Apply AWS security best practices to protect cloud resources, workloads, and associated data. Basic Qualifications: - Minimum of 10 years of relevant professional experience in cybersecurity engineering, information assurance, vulnerability management, or enterprise security operations. - Demonstrated experience supporting DoD, federal government, or similarly regulated enterprise environments. - Extensive hands-on experience conducting vulnerability assessments, implementing security controls, and remediating technical security findings. - Demonstrated experience administering, configuring, and securing enterprise Windows and Linux systems. - Experience supporting RMF compliance, continuous monitoring, and security authorization activities. - Strong understanding of enterprise infrastructure, operating system security, endpoint protection, and vulnerability management principles - CompTIA Security+ — Current certification required. - AWS Cloud Certification — Current AWS certification required, such as AWS Certified Solutions Architect, AWS Certified SysOps Administrator, AWS Certified Security – Specialty, or another relevant AWS certification. Must meet applicable DoD 8140 qualification requirements for the position’s designated cybersecurity work role and proficiency level, as established by contractual and governing DoD requirements. - Top Secret (TS) security clearance required for full performance of position duties. Candidates possessing an active Secret clearance will be considered, provided they are eligible for and willing to undergo the Top Secret clearance investigation and adjudication process. The employer will sponsor eligible candidates holding a Secret clearance for a Top Secret clearance upgrade, subject to government and contractual approval. Desired Skills: - Candidates must demonstrate practical experience with the following technologies, standards, and processes: NIST Risk Management Framework (RMF), NIST SP 800-53 security and privacy controls, NIST SP 800-137 continuous monitoring, Configuration management and security baseline enforcement, DISA STIG and SRG implementation, eSTIG assessment tools, SCAP compliance scanning, STIG remediation and validation, Tenable Security Center (Tenable.sc), Tenable Nessus scanner installation, configuration, and administration, Vulnerability identification, prioritization, mitigation, and remediation, Host-Based Security System (HBSS) administration and management, Red Hat Enterprise Linux (RHEL) administration, Microsoft Windows Server administration, Operating system patching and security hardening, Enterprise endpoint security management, AWS cloud security fundamentals, Security control implementation and technical compliance documentation. - Previous experience serving as an Information System Security Engineer (ISSE) in a DoD environment. - Experience supporting RMF authorization packages and ATO activities. - Familiarity with DoD cybersecurity policies, security control assessment procedures, and continuous monitoring requirements. - Experience with Trellix/McAfee ePO and enterprise endpoint security management. - Experience automating system configuration, compliance assessments, and remediation using Ansible, PowerShell, Bash, or similar technologies. - Experience with AWS security services, cloud infrastructure security, and federal cloud compliance requirements. - Experience developing vulnerability metrics, compliance dashboards, and technical security reports. - Experience supporting complex, mission-critical enterprise information systems. - Familiarity with enterprise networking, firewall configurations, and network security principles. - Additional professional certifications such as CISSP, CompTIA SecurityX, CySA+, Red Hat Certified System Administrator (RHCSA), or AWS Certified Security – Specialty. Equal Opportunity Statement: Seneca Holdings provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex/gender, sexual orientation, national origin, age, disability, marital status, genetic information and/or predisposing genetic characteristics, victim of domestic violence status, veteran status, or other protected class status. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leave of absence, compensation and training. The Company also prohibits retaliation against any employee who exercises his or her rights under applicable anti-discrimination laws. Notwithstanding the foregoing, the Company does give hiring preference to Seneca or Native individuals. Veterans with expertise in these areas are highly encouraged to apply.