Senior Information Systems Security Engineer (SME) leading DOJ's Security Assessment and Authorization program with expert-level authority over RMF lifecycle execution, security control implementation, and risk-informed authorization decisions across complex federal IT environments.
What you'll do
- Lead end-to-end RMF lifecycle execution and mentor security teams through system categorization, control selection, and tailoring aligned with DOJ risk tolerance
- Direct comprehensive security control assessments, authorization documentation, and executive-level risk acceptance reviews
- Oversee implementation of technical, operational, and management controls across system lifecycles with quality assurance
- Manage continuous monitoring programs, collect security metrics and trends, and inform risk posture adjustments
- Serve as senior technical advisor on security architecture decisions, incident response, vulnerability remediation, and audit readiness
- Support OIG and FISMA compliance activities, ensuring systems remain defensible and audit-ready
Mission
This role directly supports the U.S. Department of Justice's Security Assessment and Authorization Program, which governs the authorization, security monitoring, and compliance of DOJ information systems. The position ensures DOJ systems align with NIST Risk Management Framework requirements, federal policy, and DOJ security directives while supporting critical national security missions.
Required skills
- NIST Risk Management Framework (RMF)
- Security Assessment and Authorization (SAA)
- FISMA compliance
- Security control selection and tailoring
- Security architecture and design
- Continuous monitoring program management
- Incident response and vulnerability remediation
- Federal IT system security engineering
- Risk-based decision analysis
- Technical leadership and mentoring