Information Systems Security Engineer– Top-Secret Clearance|Charleston, SC

Cambridge International Systems Inc•Charleston, SC

3d•$103,000 - $121,000•Onsite

About The Position

Cambridge International Systems, Inc. is seeking an Information System Security Engineer (ISSE) to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division in North Charleston, South Carolina. This full-time CONUS position supports the design, acquisition, and sustainment of Marine Corps Systems Command IT systems and requires an active Top Secret clearance. The base salary range is approximately $103,000 to $121,000 annually; the final offer depends on relevant experience, skills, internal equity, and market data. The ISSE integrates cybersecurity into system architectures throughout the system lifecycle, ensuring compliance with government policies, cybersecurity standards, and Risk Management Framework requirements. The role partners with engineers, developers, architects, ISSM/ISSO personnel, and government stakeholders to deliver secure, resilient solutions for U.S. government missions. Work includes engineering and validating security controls, assessing risks and vulnerabilities, supporting RMF authorization and continuous monitoring, maintaining security documentation, and guiding secure system design and integration. The position involves desk-based computer work and may require travel between company offices, customer sites, and government installations. Work may occur in secure facilities where personal electronic devices are restricted. Occasional extended hours, including evenings or weekends, may be needed. Employment is contingent on a successful background investigation, and alcohol and drug screening may be required for federal contract compliance.

Requirements

Bachelor’s degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in Computer Science, or a related discipline; the degree program must be ABET-accredited.
At least three years of experience developing, implementing, and maintaining cybersecurity policies, including Assessment and Authorization activities.
Demonstrated experience engineering NIST RMF controls and producing RMF artifacts.
Current and active Top Secret security clearance.
DoD 8570/8140 Level I certification in IAM, IAT, or IASAE.
Ability to manage competing priorities, work under deadlines, and maintain attention to detail.
Ability to communicate with team members, customers, and stakeholders through verbal and written methods.

Nice To Haves

Experience supporting DoD, Intelligence Community, or other classified government systems.
Understanding of secure systems engineering, defense-in-depth, Zero Trust architectures, and large-scale distributed systems.
Experience with operating systems, networking, virtualization, cloud, IAM, encryption, and cybersecurity technologies.
Experience with vulnerability assessment tools such as ACAS, Nessus, or SCAP.
Experience with cloud security, hybrid environments, containers, Kubernetes, or DevSecOps pipelines.
Familiarity with PowerShell, Python, Ansible, Terraform, the DoD Enterprise DevSecOps Reference Design, or Platform One.
Additional security certifications such as Security+, CISSP, CASP+, CCSP, GIAC, or IASAE.
Strong technical writing and verbal communication skills for technical and leadership audiences.
Experience with large-scale defense, intelligence, or space systems, including ground infrastructure, mission operations, networks, cloud, or enterprise IT.

Responsibilities

Integrate cybersecurity requirements into system architectures, engineering designs, interface specifications, and lifecycle documentation.
Engineer, implement, and validate controls under NIST RMF, NIST SP 800-53, CNSSI 1253, and DoD cybersecurity guidance.
Conduct architecture reviews, vulnerability assessments, threat and risk analyses, attack surface analyses, and mitigation planning.
Participate in design reviews, technical interchange meetings, and configuration control boards to incorporate cybersecurity from the outset.
Develop and maintain SSPs, control implementation statements, security and network diagrams, interface documents, and engineering analyses.
Support RMF activities, including SAPs, SARs, POA&Ms, continuous monitoring documentation, and authorization artifacts.
Identify security gaps and architectural risks and recommend practical engineering solutions.
Collaborate with engineering teams to establish and maintain secure configuration baselines.
Evaluate system changes, technology insertions, and architecture modifications for cybersecurity and accreditation impacts.
Analyze vulnerability scan results, prioritize findings, plan remediation, and validate corrective actions.
Participate in integration, testing, verification, validation, and accreditation activities to confirm security controls perform as intended.
Assess control effectiveness through continuous monitoring and recommend improvements.
Ensure secure integration of COTS, GOTS, open-source, cloud-based, and custom-developed technologies.
Provide guidance on secure design, defense-in-depth, Zero Trust principles, and cybersecurity best practices.
Prepare technical reports, engineering recommendations, risk assessments, and executive briefings.