Information Systems Security Engineer (ISSE)
About The Position
The Information System Security Engineer (ISSE) leads and executes security engineering activities across complex information systems. Responsibilities include designing and implementing security architectures for new and existing networked systems, ensuring hardware, operating systems, and applications meet cybersecurity requirements and RMF‑aligned security controls. The ISSE validates compliance with configuration guidance, supports testing and evaluation of security designs, and assists with integration testing to confirm that safeguards protecting data and system interconnections function as intended. In production environments, the ISSE continuously monitors security control implementations, responds to risk findings, supports risk assessments, and contributes to POA&M management. The role also includes supporting the development and reporting of system‑level security metrics. The SITE III JIOC contract establishes a comprehensive, multi‑discipline framework for requirements engineering, solutions engineering, scheduling, reliability, resiliency, service development, integration, test and evaluation, maintainability, and enterprise analysis. This framework supports the full National Defense Intelligence enterprise—including Combatant Commands, Partner Nations, and Federal Agencies—to ensure timely, accurate Joint Intelligence Operations Center (JIOC) collection, correlation, and dissemination. Our team leverages industry best practices in architecture design, data science, cloud services, DevSecOps, and platform integration to build, sustain, and continuously enhance enterprise business systems, system‑of‑systems integrations, and back‑end workflow processes.
Requirements
- Bachelor’s degree in an area relevant to the position with 10+ years of relevant experience OR a Master’s degree in an area relevant to the position with 8+ years of relevant experience; an additional 4 years of relevant experience maybe considered in lieu of a degree.
- Active TS/SCI or SCI eligibility and active polygraph (or ability to obtain a polygraph).
- Experience supporting RMF Assessment & Authorization processes and documentation.
- Experience collaborating with developers and architects to interpret and implement security requirements.
- Ability to guide developers on security policy and technical compliance.
- Experience with DISA STIGs and STIG Viewer.
- Extensive experience with Linux operating systems
- Proven experience performing Systems Security tasks including: Security Information and Event Monitoring (Splunk)
- Hands‑on experience developing and validating security controls and test procedures.
- Knowledge of current security risks, protocols, and threat landscapes.
- DoD 8570 IAT/IAM Level II certification (e.g., Security+).
- Experience with RMF tools such as Xacta.
- Ability to work full‑time in a SCIF.
Nice To Haves
- Experience with AWS or Google Cloud‑hosted systems.
- Experience with Cloudtrail, Cloudwatch, Openshift, and Antible
- Experience working in a DevSecOps environment and toolchain.
- Experience developing and using security tools for scanning, testing, monitoring, and reporting.
- Experience planning and overseeing configuration changes across multiple networks.
- Strong analytical and problem‑solving skills.
Responsibilities
- Leads and executes security engineering activities across complex information systems.
- Designs and implements security architectures for new and existing networked systems.
- Ensures hardware, operating systems, and applications meet cybersecurity requirements and RMF‑aligned security controls.
- Validates compliance with configuration guidance.
- Supports testing and evaluation of security designs.
- Assists with integration testing to confirm that safeguards protecting data and system interconnections function as intended.
- Continuously monitors security control implementations in production environments.
- Responds to risk findings.
- Supports risk assessments.
- Contributes to POA&M management.
- Supports the development and reporting of system‑level security metrics.
- Analyzes security logs using SIEM tools such as Splunk and recommending appropriate actions.
- Reviews ACAS scan results and assess findings.
- Assists with DISA STIG analysis and implementation to ensure compliant system configurations.
- Ensures development processes incorporate security requirements throughout the lifecycle.
- Validates system‑level ConMon requirements and ensures alignment with monitoring strategies.
- Applies secure design, architecture, and coding principles when implementing controls.
- Collaborates with system leads, ISSOs, and program managers on security activities.
- Defines, designs, implements, and evaluates system and network security measures.
- Identifies risks, evaluates mitigations, assesses residual risk, and provides recommendations.
- Develops and implements solutions addressing vulnerabilities.
- Leads technical components of internal audits and investigations.
- Ensures adherence to government regulations and industry standards.
Benefits
- Heavily subsidized employee benefits coverage for you and your dependents
- 25 days of PTO accrued annually up to a generous PTO cap
- Eligible to participate in an attractive bonus plan
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
