Note: The job is a remote job and is open to candidates in USA. Red River is seeking a highly technical Information Systems Security Engineer to support a U.S. Navy program. The role focuses on hands-on security engineering, including RMF and ATO support, system hardening, vulnerability remediation, infrastructure troubleshooting, security control validation, and automation across Linux, virtualization, network, and logging environments.
Responsibilities
- Perform hands-on security engineering in support of Navy RMF and ATO requirements
- Implement and validate technical security controls across servers, virtualization, network, and logging environments
- Harden systems in accordance with applicable DISA STIGs, Navy security requirements, and RMF control requirements
- Perform vulnerability remediation, including analysis of findings, root-cause identification, remediation, and validation
- Configure, secure, troubleshoot, and validate RHEL/Linux systems
- Support security hardening and troubleshooting of VMware environments
- Perform security configuration and troubleshooting of Cisco Catalyst and Cisco ACI infrastructure
- Support centralized security logging and monitoring using Splunk and Cribl
- Analyze system and security logs to troubleshoot issues and validate security requirements
- Support collection and validation of technical evidence required for RMF/ATO activities
- Translate RMF security requirements into practical technical implementations
- Work directly with infrastructure teams to remediate security deficiencies
- Automate repetitive security engineering and validation tasks where appropriate
Skills
- Bachelor's degree in cybersecurity, computer science, information technology, engineering, or a related technical field, or equivalent professional experience
- 7+ years of hands-on experience in cybersecurity, systems engineering, network engineering, or information assurance
- Demonstrated experience supporting RMF and ATO activities within a DoD environment
- Strong hands-on experience with RHEL/Linux administration and security hardening
- Experience implementing and validating DISA STIG requirements
- Hands-on experience with VMware environments
- Hands-on experience with Cisco Catalyst switching and Cisco ACI
- Hands-on experience with Splunk and Cribl or comparable enterprise logging technologies
- Strong understanding of vulnerability scanning, remediation, and security validation
- Strong Linux command-line and troubleshooting skills
- Ability to troubleshoot complex infrastructure and security issues across operating-system, virtualization, network, and logging layers
- Active DoD Secret clearance required
- Ability to obtain and maintain any additional program-specific access requirements
- U.S. Citizenship Required
- Experience supporting U.S. Navy or DoD mission systems
- Experience with Navy RMF processes and ATO assessments
- Experience with eMASS
- Experience interpreting and implementing DISA STIGs across multiple technology platforms
- Experience with Tenable/Nessus or comparable vulnerability-scanning platforms
- Experience with PowerShell, Bash, Python, or other scripting languages used for security automation
- Experience troubleshooting authentication, access control, auditing, encryption, and system logging requirements
- Experience integrating infrastructure logs into Splunk through Cribl
- Experience with SCAP/STIG compliance tooling
- Security+
- CISSP
- CySA+
- Linux-related certification
- VMware certification
- Cisco certification
Company Overview