Information System Security Engineer (ISSE) - Alexandria, VA

Military Spouse Corporate Career Network•Alexandria, VA

2d•Onsite

About The Position

Akima Data Management (ADM) is seeking a highly skilled, mission-driven Information System Security Engineer to design, engineer, and validate cybersecurity capabilities across Department of War (DoW) Office of Inspector General information systems. The role ensures systems are architected, implemented, and sustained in alignment with federal, DoD, and organizational cybersecurity requirements. Security engineering is integrated throughout the system lifecycle, from requirements and design through development, testing, deployment, and continuous monitoring. Based in Alexandria, Virginia, and supporting the Cybersecurity Division, the ISSE helps protect the confidentiality, integrity, and availability of DoW OIG systems and data while enabling mission success through secure, resilient engineering practices. The role collaborates with engineering, operations, leadership, and external stakeholders to safeguard mission-critical systems and support secure, compliant enterprise operations.

Requirements

Active TOP SECRET clearance with SCI access.
Bachelor’s degree and 5–10 years of relevant experience, or 10+ years of experience in lieu of a degree.
IAM Level III certification, such as CGRC, CASP+ CE, CISSP, or CISM.
Strong understanding of NIST, FISMA, DoD, and organizational cybersecurity engineering frameworks.
Experience with vulnerability management and policy writing.
Experience with security architecture, RMF engineering activities, and secure system design.
Strong communication, analytical, and documentation skills.

Nice To Haves

IAT Level III certification.

Responsibilities

Define, refine, and validate security requirements based on mission objectives, threat assessments, risk analyses, and applicable cybersecurity policies, standards, and frameworks.
Design and implement secure system architectures, data flows, and engineering solutions aligned with NIST, DoD, FedRAMP, and Zero Trust principles.
Develop security engineering artifacts, interface control documents, system security plans (SSPs), and technical documentation supporting RMF authorization and accreditation activities.
Conduct security architecture reviews, threat modeling, vulnerability assessments, and security impact analyses for on-premises, cloud, and hybrid environments.
Lead cloud vulnerability management, including scanning, assessment, prioritization, remediation tracking, and risk reporting across enterprise cloud platforms.
Develop, review, and maintain cybersecurity policies, standards, procedures, and implementation guidance.
Engineer and implement security controls, secure configurations, STIGs, SRGs, and baseline hardening requirements across systems, applications, cloud services, and networks.
Perform technical control assessments, security testing, validation activities, and control effectiveness reviews.
Analyze security findings, recommend risk-based mitigation strategies, and support POA&M development, remediation management, and closure activities.
Integrate security requirements throughout the System Development Life Cycle (SDLC), including secure coding, configuration management, and deployment practices.
Conduct security assessments for system upgrades, patches, cloud migrations, integrations, and infrastructure changes.
Design and support continuous monitoring capabilities, including automated vulnerability scanning, logging, alerting, and security analytics solutions.
Provide technical support for incident response, forensic investigations, containment, eradication, and recovery operations.
Assess emerging threats, vulnerabilities, cloud technologies, and adversary tactics to strengthen security posture and resilience.
Translate complex security engineering requirements into actionable guidance for system administrators, developers, architects, and operational teams.