Information System Security Engineer (ISSE) - Alexandria, VA
About The Position
Akima Data Management (ADM) is seeking a mission-driven Information System Security Engineer to design, engineer, and validate cybersecurity capabilities across Department of War Office of Inspector General information systems. The role ensures systems are architected, implemented, and sustained in alignment with federal, DoD, and organizational cybersecurity requirements, integrating security engineering throughout the system lifecycle—from requirements and design through development, testing, deployment, and continuous monitoring. Based in Alexandria, Virginia, and supporting the Cybersecurity Division, the ISSE helps safeguard the confidentiality, integrity, and availability of DoW OIG systems and data. The position collaborates with engineering, operations, leadership, and external stakeholders to support secure, resilient, and compliant mission operations.
Requirements
- Active TOP SECRET clearance with SCI.
- Bachelor’s degree and 5–10 years of relevant experience, or 10 or more years of relevant experience in lieu of a degree.
- IAM Level III certification, such as CGRC, CASP+ CE, CISSP, or CISM.
- Strong understanding of NIST, FISMA, DoD, and organizational cybersecurity engineering frameworks.
- Experience with vulnerability management and policy writing.
- Experience with security architecture, RMF engineering activities, and secure system design.
- Strong communication, analytical, and documentation skills.
Nice To Haves
- IAT Level III certification.
Responsibilities
- Define, refine, and validate security requirements based on mission objectives, threat assessments, risk analyses, and applicable policies, standards, and frameworks.
- Design and implement secure system architectures, data flows, and engineering solutions aligned with NIST, DoD, FedRAMP, and Zero Trust principles.
- Develop security engineering artifacts, interface control documents, system security plans (SSPs), and technical documentation for RMF authorization and accreditation activities.
- Conduct security architecture reviews, threat modeling, vulnerability assessments, and security impact analyses for on-premises, cloud, and hybrid environments.
- Lead cloud vulnerability management, including scanning, assessment, prioritization, remediation tracking, and risk reporting.
- Develop, review, and maintain cybersecurity policies, standards, procedures, and implementation guidance.
- Engineer and implement security controls, secure configurations, STIGs, SRGs, and baseline hardening requirements across systems, applications, cloud services, and networks.
- Perform technical control assessments, security testing, validation, and control effectiveness reviews.
- Analyze security findings, recommend risk-based mitigations, and support POA&M development, remediation management, and closure.
- Integrate security requirements throughout the SDLC, including secure coding, configuration management, and deployment practices.
- Assess upgrades, patches, cloud migrations, integrations, and infrastructure changes for security risks.
- Design and support continuous monitoring capabilities, including automated vulnerability scanning, logging, alerting, and security analytics.
- Provide technical support for incident response, forensic investigations, containment, eradication, and recovery.
- Assess emerging threats, vulnerabilities, cloud technologies, and adversary tactics to strengthen security posture and resilience.
- Translate security engineering requirements into actionable guidance for system administrators, developers, architects, and operations teams.
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- 401(k)
- Other voluntary benefits
- Paid Time Off (PTO) for regular full-time and part-time employees
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
