USAF - ISSE

cFocus Software Incorporated•Linthicum Heights, MD

2d•Onsite

About The Position

cFocus Software is seeking an Information System Security Engineer (ISSE) to support a program for the United States Air Force. The position is on-site in Linthicum Heights, Maryland, and requires an active TS/SCI clearance. The ISSE translates Government-approved security architecture, system requirements, and DoD compliance requirements into technical controls and engineering work. The role implements and validates security controls across infrastructure, applications, networks, operating systems, and cloud services, and supports secure configurations, automation, monitoring, vulnerability remediation, and security testing. The engineer also provides technical evidence and documentation for RMF and authorization activities, coordinates findings with ISSOs and the ISSM, supports incident response, and maintains design, configuration, and implementation records.

Requirements

Active TS/SCI clearance.
Bachelor of Science in Computer Science, Information Technology, or a related field.
Experience implementing and validating security controls for enterprise systems and infrastructure.
Knowledge of RMF, authorization boundaries, control assessments, and compliance evidence.
Experience with STIGs, secure configurations, vulnerability analysis, and remediation validation.
Ability to engineer security across networks, operating systems, applications, and cloud services.
Experience with scripting, IaC/CaC, source control, and security integration in CI/CD workflows.
Experience configuring logging, monitoring, alerting, and security tool integrations.
Ability to document designs, test results, configurations, and remediation recommendations clearly.
Strong collaboration skills across architecture, cybersecurity, development, and operations teams.

Responsibilities

Translate Government-approved security architecture, system requirements, and DoD compliance requirements into implementable technical controls and engineering tasks.
Implement and validate controls enforcing Government-defined authorization boundaries across assigned infrastructure, applications, and cloud services.
Engineer secure configurations for networks, servers, applications, and supporting services; evaluate proposed changes for security and integration impacts.
Develop and maintain automation scripts that apply STIGs and document system configurations and network diagrams from live environments.
Integrate Government-specified cybersecurity controls and security guardrails into CI/CD pipelines.
Implement IaC and CaC using centralized repositories and approved baselines; support automated security evaluation before production deployment.
Configure and validate logging, monitoring, observability, and alerting across authorization boundaries in accordance with approved plans.
Analyze vulnerability and configuration assessment findings; recommend corrective actions, implement approved fixes, and verify remediation effectiveness.
Support security testing and assessments by defining technical validation steps, collecting evidence, and resolving identified engineering deficiencies.
Provide technical evidence, configuration records, test results, and monitoring data supporting RMF, ATO, Assess-Only Authorization, and cATO activities.
Support integration of CSSP capabilities and Government-approved cross-domain solutions within assigned security architecture and impact levels.
Coordinate system-level findings and remediation status with ISSOs and the ISSM; supply engineering analysis for POA&Ms and risk recommendations.
Support incident response through approved technical procedures, log analysis, control corrections, and directed recovery or remediation activities.
Maintain design and as-built documentation, configuration traceability, and implementation procedures; recommend improvements to security automation and monitoring.