Information System Security Engineer (ISSE)(Mid/Senior)

OneZero Solutions•Washington, DC

1d•Onsite

About The Position

Designs and integrates security requirements into systems and architectures to ensure secure development and deployment. Serve as the senior technical authority on security engineering matters for assigned programs and systems.

Requirements

3-5 years of experience (Mid-level)
7-10 years of experience (Senior-level)
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Electrical Engineering, or a closely related field.
8–12 years of total information systems security engineering experience, with demonstrated depth across the following disciplines:
4+ years designing and implementing secure architectures across classified or federal enterprise environments
3+ years supporting RMF activities including SSP development, security control implementation, and authorization package preparation
3+ years integrating security into SDLC and/or DevSecOps pipelines including threat modeling, SAST/DAST, and CI/CD security gates
3+ years working with cloud environments (AWS, Azure, GCP) including cloud-native security architecture and configuration
2+ years coordinating with ISSOs, system architects, developers, and government stakeholders on security engineering deliverables
Experience supporting DHS, Intelligence Community (IC), or other federal agency programs with working knowledge of NIST 800-53, NIST 800-160, ICD 503, and CNSSI 1253
Demonstrated experience operating in classified environments up to TS/SCI
CISSP, CISM, CSSLP, CASP+ or equivalent certifications

Responsibilities

Translate security requirements into comprehensive system designs, reference architectures, and security overlays across complex, multi-domain environments
Design and implement secure architectures for classified and unclassified systems, cloud environments, hybrid infrastructures, and Cross Domain Solutions (CDS)
Apply defense-in-depth principles, zero trust architecture concepts, and least-privilege design patterns across all engineering activities
Evaluate and select security technologies, tools, and controls appropriate to system classification level, mission requirements, and threat environment
Develop and maintain system security architectures, security design documentation, and engineering artifacts in support of RMF authorization packages
Collaborate with software development teams to ensure security controls are implemented correctly and validated before system authorization
Support software assurance activities including secure code review, SAST/DAST integration, and vulnerability remediation guidance
Coordinate directly with ISSOs, system architects, software developers, program managers, and government stakeholders to integrate security into all phases of system development and operation
Brief security architecture decisions, risk posture, and engineering recommendations to senior leadership and Authorizing Officials
Provide authoritative guidance on applicable security standards, policies, and frameworks including NIST 800-53, NIST 800-160, ICD 503, CNSSI 1253, and DHS security policy
Represent the security engineering function in program reviews, design reviews, and technical working groups