Information System Security Engineer

Bering Straits Native Corp•Colorado Springs, CO

7d•Onsite

About The Position

The Information System Security Engineer (ISSE) integrates cybersecurity and information assurance requirements into the design, development, implementation, and sustainment of information systems. The role applies security engineering principles throughout the system development lifecycle to protect the confidentiality, integrity, availability, authenticity, and non-repudiation of systems and data. It supports Risk Management Framework (RMF) activities and system accreditation and authorization for classified and unclassified systems, and develops and maintains cybersecurity engineering artifacts such as System Security Plans, Security Assessment Reports, POA&Ms, and security architecture documentation. The engineer collaborates with ISSMs, system administrators, network engineers, program managers, and government representatives to incorporate security into system designs. Duties include performing security analyses, vulnerability assessments, risk evaluations, technical reviews, and security testing support; reviewing architectures and configurations for compliance; implementing security controls and secure network protections; developing cybersecurity guidance; and providing technical recommendations to program management and senior leadership. The role also supports incident response, continuous monitoring, audits, and compliance initiatives. This position is in Colorado Springs, Colorado, is contingent upon contract award, and has no supervisory responsibilities. It is performed primarily in government offices, engineering facilities, data centers, secure facilities, and classified environments, across classified and unclassified networks. The schedule is standard full-time, with occasional extended hours and travel possible to support mission needs. Applicants must be able to obtain and maintain required clearances and access authorizations, potentially up to Top Secret/SCI, and may need access to military installations. Employment is conditioned on passing a pre-employment drug screening and acceptable background-check results. The employer states that it gives hiring, promotion, training, and retention preference to qualifying BSNC shareholders, shareholder descendants, and shareholder spouses, and is an equal opportunity employer.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, Mathematics, or a related technical field; additional relevant experience may substitute for education.
At least 5 years of experience in cybersecurity, information assurance, information security engineering, systems engineering, or a related technical discipline.
Experience implementing RMF for DoD or Federal Government systems.
Experience developing and maintaining cybersecurity documentation and accreditation packages.
Experience conducting security-control implementation, assessment, and compliance activities.
Experience supporting systems engineering throughout the system lifecycle.
Familiarity with network security, operating-system security, endpoint protection, and cloud-security concepts.
Experience identifying, analyzing, and mitigating cybersecurity risks and vulnerabilities.
Strong technical writing and documentation skills.
Ability to communicate effectively with technical and non-technical stakeholders.
Must possess or be eligible to obtain and maintain a Top Secret security clearance.
Thorough knowledge of cybersecurity engineering principles and best practices.
Working knowledge of NIST RMF, NIST SP 800-53, CNSSI, DoD cybersecurity policies, and applicable federal regulations.
Understanding of security architecture, network design, secure systems engineering, and defense-in-depth strategies.
Knowledge of Windows, Linux, and virtualized environments.
Familiarity with enterprise cybersecurity tools, intrusion-detection systems, vulnerability scanners, SIEM platforms, and endpoint-security technologies.
Understanding of PKI, encryption technologies, identity management, and access-control solutions.
Ability to evaluate technical vulnerabilities and develop remediation plans.
Strong analytical, troubleshooting, and problem-solving skills.
Ability to work independently and as part of a multidisciplinary engineering team.
Proficiency with Microsoft Office Suite and cybersecurity management tools.
Knowledge of organizational procedures and workflows.
Basic knowledge of relevant technologies or tools, such as Microsoft 365, communication platforms, or industry-standard software.
Knowledge of customer-service practices and professional inquiry management.
Knowledge of data privacy and confidentiality principles for handling sensitive information.
Written and verbal communication skills.
Time-management and prioritization skills, including balancing tasks and meeting deadlines.
Interpersonal and teamwork skills.
Attention to detail and ability to produce accurate work.
Must be able to pass a pre-employment drug screening and have acceptable background-check results.
Must maintain required security clearances and access authorizations; may need to obtain access to military installations.

Nice To Haves

Active Top Secret clearance with SCI eligibility or current TS/SCI clearance.
DoD 8570/8140 certification, such as Security+, CISSP, CASP+, CISM, CAP, GSLC, or equivalent.
Experience supporting Air Force, Space Force, Army, Navy, SOCOM, Intelligence Community, or other Federal Government environments.
Experience supporting Azure Government, AWS GovCloud, or hybrid cloud architectures.
Experience supporting classified systems, SCI environments, and Special Access Programs.
Knowledge of Zero Trust Architecture principles and implementation strategies.
Experience with ACAS, SCAP, Nessus, HBSS, Endpoint Security Solutions, Splunk, or similar cybersecurity platforms.
Experience supporting DevSecOps, secure software development, and CI/CD security initiatives.
Familiarity with ICD 503, CNSS policies, and Intelligence Community cybersecurity requirements.
Prior experience as an ISSO, ISSM, Cybersecurity Engineer, Systems Engineer, or Security Architect.

Responsibilities

Integrate cybersecurity and information assurance requirements into information-system design, development, implementation, and sustainment.
Apply security engineering principles throughout the system development lifecycle to protect systems and data.
Support RMF activities, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Develop and maintain cybersecurity artifacts, including SSPs, SARs, POA&Ms, and security architecture documentation.
Collaborate with ISSMs, system administrators, network engineers, program managers, and government representatives to incorporate security requirements into system designs.
Conduct security engineering analyses, vulnerability assessments, system risk evaluations, and technical reviews.
Review system architectures, network diagrams, hardware configurations, software implementations, and technical documentation for cybersecurity compliance.
Evaluate and implement security controls consistent with NIST, DoD, Intelligence Community, and organizational requirements.
Support accreditation and authorization efforts for classified and unclassified information systems.
Assist with secure network architectures, boundary protection, encryption, and access-control solutions.
Analyze cybersecurity vulnerabilities and recommend mitigation strategies.
Support security testing, penetration-testing coordination, vulnerability scanning, and cybersecurity inspections.
Develop cybersecurity policies, procedures, standards, and implementation guidance.
Participate in engineering design reviews, configuration control boards, and technical working groups.
Provide technical cybersecurity recommendations to program management and senior leadership.
Support incident response, continuous monitoring, audit activities, and cybersecurity compliance initiatives.