Information Systems Security Engineer

Booz Allen Hamilton•Usa, MD

About The Position

The Information Systems Security Engineer (ISSE) applies cybersecurity, risk management, and secure system design expertise to protect critical mission systems and AI-enabled capabilities. The role identifies security controls, assessment tools, and authorization strategies for integrating emerging technologies into operational, research, and enterprise environments. The ISSE guides and mentors professionals addressing cybersecurity challenges, conducting security assessments, and remediating vulnerabilities across systems and architectures. The role leads the development and maintenance of Risk Management Framework (RMF) authorization packages, manages ATO processes, and oversees cybersecurity artifacts such as system security plans and POA&Ms. Using tools including ACAS, SCAP, and eMASS, the ISSE evaluates system risks, ensures compliance with STIGs and IAVM directives, and coordinates vulnerability remediation across project teams. The role embeds cybersecurity practices into AI development pipelines and throughout the system lifecycle. It collaborates with DevOps, Cloud Architects, and AI and ML Engineers to develop secure solutions supporting national operations, readiness, and critical infrastructure. A TS/SCI clearance with polygraph is required.

Requirements

Experience with the Risk Management Framework (RMF), including creation and maintenance of authorization packages, ATOs, and re-authorizations.
Experience conducting security assessments, vulnerability remediation, and continuous monitoring in alignment with RMF.
Experience with compliance scanning and vulnerability management tools, especially ACAS and SCAP.
Experience implementing cybersecurity directives such as IAVM directives, CPUs, and STIGs.
Experience updating and maintaining eMASS, including scan results, documentation, and evidence packages.
Knowledge of system lifecycle management and procurement cybersecurity requirements.
Ability to prepare and maintain cybersecurity documentation, including SSPs, SARs, and POA&Ms.
Ability to analyze system architectures, hardware, and software designs to identify and mitigate security risks.
TS/SCI clearance with a polygraph.
High school diploma or GED and 6+ years of cybersecurity experience, or a bachelor's degree and 4+ years of cybersecurity experience.

Nice To Haves

Experience securing AI-enabled or ML-driven systems.
Experience with cloud and hybrid architectures, particularly securing AI workloads across varied computing environments.
Experience with DevSecOps tooling, CI/CD security integration, and automated compliance workflows.
Experience working with cross-functional AI and ML development teams on secure model training, deployment pipelines, and monitoring frameworks.
Experience in secure software development or secure architecture design reviews.
Experience with cybersecurity automation scripting such as Python, PowerShell, or Ansible for STIG automation, scanning pipelines, or IaC security controls.
Knowledge of DoD-specific cybersecurity governance frameworks, mission workflows, and operational environments, including USCYBERCOM or DoW environments.

Responsibilities

Guide and mentor professionals as they analyze cybersecurity challenges, conduct security assessments, and remediate vulnerabilities.
Lead the creation and maintenance of RMF authorization packages and manage ATO processes.
Oversee development and maintenance of cybersecurity artifacts, including system security plans and POA&Ms.
Use ACAS, SCAP, and eMASS to evaluate system risks and maintain scan results, documentation, and evidence packages.
Ensure compliance with STIGs, IAVM directives, CPUs, and other applicable cybersecurity directives.
Coordinate vulnerability remediation efforts across project teams.
Embed cybersecurity best practices into AI development pipelines and throughout the system lifecycle.
Analyze system architectures, hardware, and software designs to identify and mitigate security risks.
Collaborate with DevOps, Cloud Architects, and AI and ML Engineers on secure solutions.