Information System Security Engineer (ISSE) Team Lead

Job Title: Information System Security Engineer (ISSE) Team Lead  (Navy RMF / Cybersecurity) 

Place of Performance: Hybrid Washington, DC 20392 

Mandatory Requirements: Top Secret Clearance with SCI Eligibility

Experience Level: 8+ years applicable experience

About JFL Consulting:

With more than 20 years of securing some of the U.S. Department of Defense and the Intelligence Community’s most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients.

Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer’s unique requirements. Visit www.jflconsulting.com

What We Offer:

· Salary range $150k-$165k

· Hybrid work schedule 2 days remote/3 days on-site

· Free on-site parking in Washington, DC

· 100% employer-paid medical, dental, and vision premiums for employees and dependents

· Flexible Spending Accounts (healthcare, dependent care, and commuter)

· Life insurance, short-term disability and long-term disability

· 401(k) with immediate vesting of company contribution

· Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)

We are seeking a hands-on ISSE Team Lead to support cybersecurity and Risk Management Framework (RMF) activities for Navy systems and programs. This role leads system security engineering, authorization (ATO) efforts, and continuous monitoring in compliance with DoD and Department of the Navy (DON) cybersecurity policies.

The ideal candidate has strong experience with eMASS, STIG implementation, RMF lifecycle management, and DoD security authorization processes, along with the ability to communicate cybersecurity risk to leadership.

Key Responsibilities

• Lead cybersecurity and RMF activities across Navy systems throughout the full lifecycle 
• Develop and maintain System Security Plans (SSPs) and ATO/Security Authorization Packages 
• Manage systems in eMASS, including artifact management and RMF workflow execution 
• Define and implement security controls, baselines, and overlays (NIST SP 800-53) 
• Conduct Security Control Assessments (SCA) support and validation activities 
• Ensure compliance with DoD, DON, NIST, and STIG security requirements 
• Manage POA&M tracking, vulnerability remediation, and risk mitigation activities 
• Support continuous monitoring (FISMA) and annual security reviews 
• Integrate penetration test and assessment findings into RMF documentation and risk tracking 
• Validate user access and ensure clearance/training compliance 
• Brief leadership on system security posture and risk

Required Qualifications

• 8+ years of cybersecurity / RMF experience (Navy or DoD preferred) 
• Experience supporting DoD system authorization (ATO) efforts 
• Strong knowledge of RMF, NIST SP 800-53, STIGs, and DoD cybersecurity policies 
• Hands-on experience with eMASS (required) 
• Experience with SCAP Compliance Checker (SCC) and STIG Viewer 
• Experience with vulnerability management and POA&M tracking 
• Background in Windows and Linux system security hardening 
• Experience in ISSE, ISSO, ISSM, or related cybersecurity engineering roles 
• Ability to communicate technical risk to leadership

Preferred Qualifications

• Prior Navy or DON cybersecurity experience 
• Experience supporting authorization boards and greenfield system deployments 
• Experience integrating penetration test results into RMF processes 
• Leadership or team lead experience in cybersecurity environments 
• Strong secure system architecture background

Certifications

• DoD 8140 / 8570 IAT Level II required (e.g., Security+, CySA+, GCIH, CISSP) 
• CISSP or CASP+ preferred

Education

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field preferred 
• Equivalent experience may be considered