Job description

Job Title: Information Systems Security Engineer Location: Colorado Springs, CO SCIF (on-site) Security Clearance: Top Secret (SCI Eligibility) We question. We listen. We adapt. Be honest. Be pragmatic. Omni Federal , founded in 2017 and headquartered in Washington, DC, is a highly specialized software solutions provider with a robust presence in key locations across the United States, including Boston, MA, Colorado Springs, CO, San Antonio, TX, and St. Louis, MO. Born out of the Department of Defense's software factory ecosystem, Omni has rapidly distinguished itself by delivering both mission-critical and enterprise solutions that enhance the technological capabilities of the federal government. With a focus on areas such as Command and Control, Cybersecurity, Space, Geospatial, and Modeling & Simulation, Omni leverages cutting-edge commercial technology tailored to government objectives, improving mission performance and delivering transformative outcomes for the Department of Defense (DoD), Intelligence Community (IC), and their end-users. The company's innovative approach is backed by its Omni Labs and SBIR Innovation centers, where they develop advanced platforms and tools in data mesh, secure connectivity, and intelligent automation. Why Omni? • Environment of Autonomy • Innovative Commercial Approach • People over process We are seeking a strong Information Systems Security Engineer to support our Space portfolio. In this role you will support security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and Government standards. Candidates must be passionate, energized, and excited to work on modern architectures and solve challenging problems for our clients. Position Description (what you will do): • Perform engineering-focused security analysis of operational and development environments, identifying threats, vulnerabilities, and internal interfaces to define and verify compliance with applicable industry and government standards. • Support the design and implementation of the Assessment and Authorization (A&A) processes under the NIST Risk Management Framework (RMF) for the development and sustainment of secure information systems. • Develop, implement, and refine audit mechanisms for systems to maintain the integrity of the security posture throughout the system lifecycle. • Leverage assessment methodologies, test results, and analysis outputs to ensure compliance with established security requirements, while identifying opportunities for system engineering enhancements. • Perform and manage periodic hardware and software inventory assessments to ensure alignment with security engineering practices. • Collaborate with government stakeholders, suppliers, and organizational teams to design, implement, and validate protective mechanisms that meet cybersecurity requirements, emphasizing clear communication and adherence to security engineering principles. Requirements: • BS in Computer Science, Cybersecurity, IT, or related field + 10–15+ years experience. • 8 years of direct Cybersecurity experience with at least: • 3 years applying RMF to support the design, development, and authorization of secure systems. • 2 years conducting security engineering analysis to identify and mitigate threats, vulnerabilities, and risks in systems. • 2 year implementing security controls and architectures in alignment with government and industry standards. • 2 year performing vulnerability assessments and risk analysis to inform system design. • 2 year supporting configuration management practices and conduct hardware/software inventory assessments. • Must meet Requirements outlined in DoDM 8140 for System Security Engineer (633) Nice to Have: • Proficiency with security compliance tools such as eMASS or Xacta for riskmanagement and reporting. • Collaborate with stakeholders, developers, and suppliers to integrate and validate security requirements. • Experience with cybersecurity policies and implementation of Risk Management Framework (RMF): e.g., DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series • Experience in utilizing security-relevant tools such as ACAS, ESS, SCAP Our team is always hungry for more – more knowledge, more problem solving, more growth, more innovation, and, ultimately, customer success. This hunger and hustle fuel our determination to excel in everything we do. It’s not just about meeting established goals; it’s about exceeding them. We take immense pride in applying our expertise in cutting-edge technologies and our ability to adapt to emerging trends directly to the users in the field, as our nation’s protectors deserve nothing less. Omni Federal is an equal opportunity and affirmative action employer. Omni Federal is committed to administering all employment and personnel actions on the basis of merit and free of discrimination based on race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or status as an individual with a disability. Consistent with this commitment, we are dedicated to the employment and advancement of qualified minorities, women, individuals with disabilities, protected veterans, persons of all ethnic backgrounds and religions according to their abilities. Proposed Pay Scale: $130,000 - $149,000

Requirements

Must-haves

Job Title: Information Systems Security Engineer
Location: Colorado Springs, CO SCIF (on-site)
Security Clearance: Top Secret (SCI Eligibility)
We question. We listen. We adapt.
Be honest. Be pragmatic.
Environment of Autonomy
Innovative Commercial Approach
People over process
Support the design and implementation of the Assessment and Authorization (A&A) processes under the NIST Risk Management Framework (RMF) for the development and sustainment of secure information systems.
Develop, implement, and refine audit mechanisms for systems to maintain the integrity of the security posture throughout the system lifecycle.
Leverage assessment methodologies, test results, and analysis outputs to ensure compliance with established security requirements, while identifying opportunities for system engineering enhancements.
Perform and manage periodic hardware and software inventory assessments to ensure alignment with security engineering practices.
BS in Computer Science, Cybersecurity, IT, or related field + 10–15+ years experience.
8 years of direct Cybersecurity experience with at least:
3 years applying RMF to support the design, development, and authorization of secure systems.
2 years conducting security engineering analysis to identify and mitigate threats, vulnerabilities, and risks in systems.
2 year implementing security controls and architectures in alignment with government and industry standards.
2 year performing vulnerability assessments and risk analysis to inform system design.
2 year supporting configuration management practices and conduct hardware/software inventory assessments.

Nice-to-haves

Proficiency with security compliance tools such as eMASS or Xacta for riskmanagement and reporting.
Collaborate with stakeholders, developers, and suppliers to integrate and validate security requirements.
Experience with cybersecurity policies and implementation of Risk Management Framework (RMF): e.g., DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series
Experience in utilizing security-relevant tools such as ACAS, ESS, SCAP
Proposed Pay Scale: $130,000 - $149,000

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: agile-ats
Effort: medium