Information Systems Security Engineer

Booz Allen Hamilton•Fort Meade, MD

6d•$99,000 - $225,000•Onsite

About The Position

The Information Systems Security Engineer (ISSE) applies cybersecurity, risk management, and secure system design expertise to help securely integrate emerging technologies into operational, research, and enterprise environments. The role identifies security controls, assessment tools, and authorization strategies that safeguard missions and sensitive data, including AI-enabled capabilities. The ISSE guides and mentors professionals addressing cybersecurity challenges, conducting assessments, and remediating vulnerabilities across varied systems and architectures. The position leads the creation and maintenance of Risk Management Framework (RMF) authorization packages, manages Authority to Operate (ATO) processes, and oversees cybersecurity artifacts such as system security plans and plans of action and milestones. Using tools including ACAS, SCAP, and eMASS, the engineer evaluates risks, ensures compliance with STIGs and IAVM directives, and coordinates remediation across project teams. The role embeds cybersecurity practices into AI development pipelines and integrates security throughout the system lifecycle. It involves hands-on problem solving and collaboration with DevOps, Cloud Architects, and AI and ML Engineers to develop secure solutions for critical mission areas.

Requirements

Experience with the Risk Management Framework (RMF), including creation and maintenance of authorization packages, ATOs, and re-authorizations.
Experience conducting security assessments, vulnerability remediation, and continuous monitoring in alignment with RMF.
Experience with compliance scanning and vulnerability management tools, especially ACAS and SCAP.
Experience implementing cybersecurity directives such as IAVM directives, CPUs, and STIGs.
Experience updating and maintaining eMASS, including scan results, documentation, and evidence packages.
Knowledge of system lifecycle management and procurement cybersecurity requirements.
Ability to prepare and maintain cybersecurity documentation, including SSPs, SARs, and POA&Ms.
Ability to analyze system architectures, hardware, and software designs to identify and mitigate security risks.
TS/SCI clearance with a polygraph is required.
High school diploma or GED and at least 6 years of cybersecurity experience, or a bachelor’s degree and at least 4 years of cybersecurity experience.

Nice To Haves

Experience securing AI-enabled or ML-driven systems.
Experience with cloud and hybrid architectures, especially securing AI workloads across varied computing environments.
Experience with DevSecOps tooling, CI/CD security integration, and automated compliance workflows.
Experience working with cross-functional AI and ML development teams to enable secure model training, deployment pipelines, and monitoring frameworks.
Experience in secure software development or secure architecture design reviews.
Experience with cybersecurity automation scripting such as Python, PowerShell, or Ansible for STIG automation, scanning pipelines, or IaC security controls.
Knowledge of DoD-specific cybersecurity governance frameworks, mission workflows, and operational environments, including USCYBERCOM or DoW environments.

Responsibilities

Guide and mentor professionals as they analyze cybersecurity challenges, conduct security assessments, and remediate vulnerabilities.
Create and maintain RMF authorization packages and manage ATO processes.
Oversee the development and maintenance of cybersecurity artifacts, including system security plans, SARs, and POA&Ms.
Evaluate system risks using ACAS, SCAP, eMASS, and related tools.
Ensure compliance with STIGs and IAVM directives and coordinate vulnerability remediation across project teams.
Embed cybersecurity best practices into AI development pipelines and integrate security throughout the system lifecycle.
Collaborate with DevOps, Cloud Architects, and AI and ML Engineers to develop secure solutions.