Senior Information Systems Security Engineer (ISSE) – TS/SCI

Location:On-site – CNMOC Headquarters
Clearance: Active TS/SCI required
Anticipated Start: September 2026, contingent upon task order award
Employment Type: Full-time

Position Overview

Dark Horse Technologies is seeking aSenior Information Systems Security Engineer (ISSE) with extensive experience supportingRisk Management Framework (RMF) accreditation activities within the Intelligence Community (IC).

This position will support a focused, approximately one-year effort to transition existing operationalCross Domain Solution (CDS) RMF authorization packages intoXactafor ongoing management by the Government. The successful candidate must bring direct, hands-on experience usingXacta 360 or legacy Xacta IA Managerto develop, process, maintain, and support RMF authorization packages for IC environments.

This is anon-site position at CNMOC Headquartersand requires an activeTS/SCI clearance.

Key Responsibilities

• Lead and support the transition of existing operational CDS RMF packages intoXacta 360.
• Develop, update, review, and maintain RMF authorization documentation within Xacta.
• Evaluate existing security authorization packages and determine required updates or remediation to align with IC RMF requirements.
• Apply applicableIntelligence Community overlays, security controls, and assessment requirements.
• Support RMF activities throughout the authorization lifecycle, including control implementation, assessment, remediation, authorization, and continuous monitoring.
• Review and validate security control implementation againstNIST SP 800-53 Rev. 4 and Rev. 5 requirements.
• Develop and maintain artifacts including Security Plans, control implementation statements, assessment evidence, POA&Ms, risk documentation, and supporting authorization materials.
• Coordinate with system owners, cybersecurity personnel, engineers, ISSMs, ISSOs, security control assessors, and Government stakeholders to resolve RMF deficiencies.
• Support RMF accreditation and authorization activities for systems operating withinJWICS and Intelligence Community environments.
• Identify gaps between existing Navy RMF documentation and IC/Xacta requirements and develop an efficient transition approach.
• Ensure authorization packages are organized and documented so they can be effectively transitioned to Government personnel for continued lifecycle management.
• Provide knowledge transfer and technical guidance to Government cybersecurity personnel responsible for sustaining the packages following completion of the transition effort.

Required Qualifications

• Minimum of five (5) years of direct, hands-on experience using Xacta 360 or legacy Xacta IA Manager to process RMF packages for Intelligence Community agencies.
• Demonstrated experience developing and managing RMF authorization packages withinIC environments.
• Strong understanding ofJWICS security requirements and operating environments.
• Demonstrated knowledge of applicableIntelligence Community security overlays and RMF requirements.
• Thorough knowledge ofNIST SP 800-53 Rev. 4 and/or Rev. 5 security controls.
• Experience supporting system authorization, accreditation, assessment, POA&M management, and continuous monitoring activities.
• Ability to interpret cybersecurity requirements and translate them into appropriate RMF documentation and implementation guidance.
• Strong written and verbal communication skills with the ability to work directly with technical and Government stakeholders.
• Ability to work independently and drive RMF packages through completion within established timelines.

Clearance Requirement

• Active Top Secret clearance with SCI eligibility/access required.

Preferred Qualifications

• Experience supportingCross Domain Solutions (CDS) or other highly controlled classified systems.
• Experience transitioning RMF packages between different governance, risk, and compliance platforms.
• Familiarity with Navy cybersecurity environments and the differences betweeneMASS-based Navy RMF processes and Xacta-based IC processes.
• Experience supporting operational DoD or IC systems through authorization and continuous monitoring.
• Relevant cybersecurity certifications such as CISSP, CAP/CGRC, CASP+/SecurityX, or equivalent.

Ideal Candidate

The ideal candidate is not simply an RMF practitioner. We are specifically seeking an experiencedXacta practitioner who has personally developed and processed authorization packages for Intelligence Community customers and can immediately begin working within an IC RMF environment.

This role is particularly well suited for an experienced ISSE, ISSM, cybersecurity engineer, or RMF specialist who understands both the technical and documentation requirements associated with moving operational systems through the IC authorization process.

Additional Information

Employment is contingent upon task order award and verification of required security clearance.

Dark Horse Technologies LLC is an Equal Opportunity Employer.