ISSE (Hybrid)

Wyetech•San Antonio, TX

1d•Hybrid

About The Position

Wyetech is seeking an experienced Information Systems Security Engineer (ISSE) to support the design, development, implementation, assessment, and authorization of secure information systems and network architectures in mission-critical Department of Defense environments. The role provides cybersecurity engineering expertise across complex, multi-tiered systems and multiple security enclaves with differing classification levels and data protection requirements. It involves distributed architectures, cloud-based systems, Big Data applications, and federal cybersecurity compliance. The ISSE collaborates with government stakeholders, cybersecurity professionals, systems engineers, and software development teams to implement security controls, assess operational risks, manage Risk Management Framework (RMF) documentation, and maintain system authorization packages. The position is hybrid, with approximately one to two days per week onsite in San Antonio, Texas; onsite schedules may change based on mission and operational requirements. Candidates must be U.S. citizens and maintain an active TS/SCI clearance with Full Scope Polygraph and applicable certification and program access requirements. Candidates must meet one of these education and experience combinations: a bachelor's degree in a related technical discipline and nine years of relevant experience; a master's degree in a related technical discipline and seven years of relevant experience; or a high school diploma or equivalent and thirteen years of relevant experience. The role also requires applicable DoD 8140 IAT Level II qualifications. The listed hourly pay range is $51.84–$118.91; actual compensation varies based on factors including contract rates, education, experience, skills, certifications, and location. Wyetech describes its culture as focused on breaking technological barriers and solving problems for federal government customers. Benefits include a company SEP IRA contribution, paid time off, voluntary insurance plans, referral bonuses, mobility among supported contracts, team-building events, and complimentary branded clothing orders.

Requirements

Active TS/SCI security clearance with Full Scope Polygraph; clearance must be maintained throughout employment.
U.S. citizenship.
Meet applicable DoD 8140 Information Assurance Technical (IAT) Level II qualification requirements.
Meet one of the stated education and experience combinations: bachelor's degree in a related technical discipline plus nine years of relevant experience; master's degree in a related technical discipline plus seven years; or high school diploma or equivalent plus thirteen years.
Demonstrated Information Systems Security Engineering experience supporting large, complex, multi-tiered programs and enterprise environments.
Experience designing, implementing, and evaluating secure system and network architectures across enclaves with differing classification and data protection requirements.
Experience implementing DoD system accreditation and authorization processes, including DIACAP or RMF; RMF experience is preferred.
Strong understanding of NIST SP 800-53, including control inheritance, security control implementation and assessment, and authorization artifact generation.
Experience creating, reviewing, editing, and maintaining system authorization documentation under federal and DoD cybersecurity policies.
Hands-on experience navigating RMF workflows, uploading authorization artifacts, and managing POA&Ms in eMASS, Xacta, or equivalent systems.
Experience interpreting, applying, and validating DISA STIGs and SRGs.
Experience with vulnerability management systems, automated security scanning tools, and security compliance platforms.
Experience reviewing scan results, identifying security deficiencies, documenting findings, implementing mitigation strategies, and tracking remediation.
Experience evaluating cybersecurity and operational risks involving open-source, COTS, and GOTS software components.
Working knowledge of TCP/IP protocols and services, computer architectures, network topologies, and secure networking principles.
Understanding of distributed computing architectures, cloud-based systems, and security considerations for Big Data applications.
Experience in security planning, risk assessments, security control evaluations, risk analysis, and risk management.
Ability to recommend system-level security solutions and collaborate with engineering and development teams to achieve required security postures.
Strong knowledge of federal and DoD Information Assurance policies, procedures, and cybersecurity requirements.
Ability to independently assess complex technical issues, interpret security requirements, and develop defensible compliance processes when established procedures are unavailable.
Strong analytical, technical documentation, communication, and interpersonal skills.
Ability to work independently and collaboratively within multidisciplinary engineering and cybersecurity teams.
Ability to work onsite approximately one to two days per week in San Antonio, Texas, and accommodate mission-driven schedule changes.
Must maintain applicable security clearance, certification, and program access requirements throughout employment.

Nice To Haves

CISSP-ISSEP certification is highly desired.
Experience developing Bash scripts to automate security administration, compliance validation, or operational processes.
Experience supporting containerized applications and infrastructure using Kubernetes.
Experience creating network diagrams, system architecture diagrams, and technical documentation using Microsoft Visio or draw.io.
Experience administering, configuring, or securing Red Hat Enterprise Linux (RHEL) environments.
Experience supporting and securing Amazon Web Services (AWS) cloud infrastructure and services.
RMF experience is preferred.

Responsibilities

Design, evaluate, and support secure system and network architectures spanning multiple enclaves with differing classification and data protection requirements.
Create, review, edit, and maintain security authorization documentation in accordance with federal and DoD cybersecurity policies.
Implement and support DoD RMF processes throughout system development, assessment, authorization, and operations.
Apply NIST SP 800-53 security controls, evaluate control inheritance, and develop supporting compliance and authorization artifacts.
Use eMASS, Xacta, or equivalent RMF systems to manage authorization workflows, upload documentation, track assessments, and maintain POA&Ms.
Interpret and apply DISA STIGs and SRGs to evaluate system configurations and support security compliance.
Conduct vulnerability assessments, analyze automated scan results, identify deficiencies, and recommend remediation strategies.
Track security findings, mitigation activities, and corrective actions for continuous monitoring and authorization maintenance.
Assess cybersecurity and operational risks of integrating open-source, COTS, and GOTS software components into mission systems.
Provide security planning, assessment, risk analysis, and risk management support for enterprise systems and applications.
Recommend technical solutions to address security requirements, mitigate vulnerabilities, and improve system security posture.
Collaborate with software developers, systems engineers, and infrastructure teams to incorporate security requirements into architectures and application designs.
Support the Government in establishing, evaluating, and enforcing trusted relationships among interconnected systems and external architectures.
Apply federal and DoD information assurance policies, procedures, and technical controls to secure networking, computing, and enclave environments.
Evaluate TCP/IP communications, network architectures, system interfaces, and infrastructure components for potential security vulnerabilities.
Support cybersecurity engineering for distributed architectures, cloud-based systems, and Big Data applications.
Facilitate requirements gathering, technical exchanges, engineering reviews, and cybersecurity discussions with government and contractor stakeholders.
Follow established security engineering and compliance processes, developing defensible procedures when formal guidance is unavailable.
Maintain security authorization packages, compliance documentation, risk assessments, and supporting technical artifacts.
Support continuous monitoring, security control assessments, vulnerability remediation, and ongoing authorization activities.
Prepare technical findings, risk assessments, mitigation recommendations, and compliance reports for government and program leadership.
Collaborate with cybersecurity, systems engineering, networking, and software development teams to resolve complex security issues.
Support improvements to security engineering processes, compliance workflows, documentation standards, and risk management practices.
Perform additional information systems security engineering responsibilities as required to support mission objectives.

Benefits

Company automatically contributes 20% of each employee's gross compensation to a Simplified Employee Pension (SEP) IRA, with no employee matching required; contributions are fully vested from day one.
PTO plan of up to 200 hours annually, aligned with applicable state leave regulations; employees may adjust their PTO allocation at the start of each calendar year.
Voluntary medical plan options, some with a Health Savings Account (HSA).
Vision and dental benefits.
Life and AD&D benefits.
Short- and long-term disability benefits.
Hospital indemnity, accident, and critical illness insurance.
Optional identity theft and legal protection services.
Employee referral bonus eligibility up to $10,000.
Mobility among Wyetech-supported contracts.
Various contract and work locations, including Maryland, Virginia, Colorado, Texas, Utah, Alaska, Hawaii, and OCONUS.
Team-building events, including monthly lunches, a summer company picnic, and an annual holiday party.
Two complimentary branded clothing orders annually.