Information Security Systems Engineer (ISSE)

Peraton•Chantilly, VA

3d•$146,000 - $234,000

About The Position

The Information System Security Engineer designs, implements, maintains, and continuously improves the security posture of information systems, networks, applications, and data. The role ensures compliance with customer security frameworks, regulations, and industry best practices while proactively identifying and mitigating risks to protect information assets.

Requirements

Active TS/SCI with relevant polygraph.
Bachelor's degree and 8+ years of experience, or a master's degree and 6+ years of experience; an additional four years of experience may be considered in lieu of a degree.
At least 3 years of hands-on experience in information systems security, cybersecurity engineering, or related roles in the customer environment as an ISSE.
Working knowledge of security frameworks and standards such as NIST SP 800-53, the NIST Cybersecurity Framework, ISO 27001, and CIS Controls.
Experience with security technologies such as firewalls, SIEM platforms, vulnerability management tools, endpoint protection, identity and access management, encryption, and network security controls.
Proficiency in assessing and securing operating systems (Windows and Linux), networks, cloud environments (AWS, Azure, or GCP), and applications.

Nice To Haves

Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
Relevant industry certifications such as CISSP, CISM, CompTIA Security+, CEH, GIAC certifications (GSEC, GCIA, GCIH, etc.), or cloud security certifications (CCSP, AWS Security Specialty, Azure Security Engineer, etc.).
Experience with Agile software development cycles and the ability to use Jira.
Hands-on experience with scripting or automation (Python, PowerShell, or Bash) for security tooling and processes.
Prior experience supporting compliance audits or regulatory frameworks relevant to the organization.
Experience in incident response, forensic analysis, or security operations center (SOC) environments.
Knowledge of zero trust architecture principles and modern identity/security architectures.

Responsibilities

Evaluate, maintain, and improve security controls, architectures, and solutions across systems, networks, endpoints, AWS cloud environments, and applications.
Perform risk and vulnerability assessments, including assessments based on controls and security architecture reviews.
Document and maintain the cybersecurity environment, standards, procedures, and system security plans.
Collaborate with IT, engineering, development, and business teams to embed security into system design, development, and operational processes, including DevSecOps practices.
Evaluate emerging threats, technologies, and security solutions, and recommend improvements to the security program.
Provide security guidance and awareness support to technical and nontechnical stakeholders.
Support continuous monitoring, metrics reporting, and security posture improvement initiatives.