Information Systems Security Engineer

Snowflake • McLean, VA

7d • $208,000 - $299,000

About The Position

Snowflake is seeking a Principal Information Systems Security Engineer to own security documentation and assessment for national security deployments operating in classified environments. The role leads a deployment’s security control assessment, from control selection and tailoring through evidence collection and authorization, and is accountable for delivering the authorization package on schedule. The immediate assignment is Arc Reactor, a classified deployment for a U.S. government customer, with the work also applying to future deployments.

The engineer prepares and maintains assessment plans, evidence schedules, control status, and residual-risk documentation for authorizing officials. They direct engineers and supporting security staff in producing control artifacts, determine what evidence is required, review submissions, and identify gaps early. The role also bridges government security reviewers and engineering teams by explaining control implementations and translating findings into actionable engineering work. Authorization status and blockers are tracked and reported weekly.

The ISSE works with engineers and security staff who produce the artifacts; the ISSE decides what is needed, reviews the work, and owns the result. The position reports into national security engineering and participates in the deployment’s weekly engineering and security cadence. Work is based in the Washington, DC area, with regular time on site.

Requirements

• Have taken at least one system through authorization to operate under a government security control framework, such as NIST 800-53/RMF, FedRAMP, or DoD RMF and its Impact Levels, and be able to identify the package for which you were responsible.
• Be able to review an engineering implementation and determine which control it satisfies and what evidence it produces.
• Have worked with government authorizing officials or security control assessors and understand what they reject and why.
• Document assessment scope, control status, evidence gaps, and residual risk so the team can use the documentation independently.
• Be eligible for TS/SCI with a full-scope polygraph or already hold that clearance.

Responsibilities

• Lead the security control assessment for an assigned deployment, from control selection and tailoring through evidence development and authorization.
• Produce and maintain the assessment plan, evidence collection schedule, control status, and residual-risk documentation for the authorizing official.
• Direct engineers and security staff producing control artifacts, specify required evidence, review deliverables, and identify requirements gaps before assessment.
• Explain Snowflake control implementations to government security reviewers and translate reviewer findings into actionable guidance for engineering teams.
• Track authorization status and blockers and report them weekly to the engineering lead and program.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: No Education Listed