Information Systems Security Engineer (ISSE)

Vantor•McLean, VA

About The Position

Vantor is forging the new frontier of spatial intelligence, helping decision makers and operators navigate what’s happening now and shape what’s coming next. Vantor is a place for problem solvers, changemakers, and go-getters—where people are working together to help our customers see the world differently, and in doing so, be seen differently. Come be part of a mission, not just a job, where you can: Shape your own future, build the next big thing, and change the world. Vantor is seeking an experienced Information Systems Security Engineer (ISSE) to support the secure development, deployment, and maintenance of mission-critical tools for our sponsor. This role is responsible for leading Assessment & Authorization (A&A) activities, managing accreditation and authorization processes, identifying and mitigating security risks, and collaborating across technical and security stakeholders.

Requirements

Active TS/SCI clearance with required polygraph
Bachelor’s degree in a related field with 12+ years of experience; OR Master’s with 10+ years; OR Doctorate with 8+ years
Demonstrated experience supporting A&A and RMF processes
Strong knowledge of DISA STIGs and hands-on experience with STIG Viewer
Deep understanding of current cybersecurity risks, protocols, and best practices
Experience working across system lifecycles in secure environments

Nice To Haves

Experience working in IC or DoD environments
Familiarity with cloud environments (AWS, Azure, or C2E)
Experience with security tools such as ACAS, SCAP, or vulnerability management platforms
Relevant certifications (e.g., Security+, CISSP, CASP+)

Responsibilities

Lead Assessment and Authorization (A&A) and Information Assurance activities in accordance with the Risk Management Framework (RMF)
Ensure secure development, deployment, and maintenance of systems, including managing accreditation and authorization processes
Identify, assess, and mitigate security risks across the system lifecycle
Provide expert guidance on system architecture, configurations, and data flows from development through decommissioning
Support project teams in selecting and implementing appropriate security controls
Recommend mitigation strategies for vulnerabilities, including POA&Ms and system exceptions
Assist in remediation of findings identified through security assessments
Maintain close coordination with the ISSM office, translating guidance into practical, low-risk implementations
Develop, track, and execute RMF packages and Plans of Action and Milestones (POA&Ms) to address cybersecurity findings
Serve as a representative to cloud and security governance groups
Engage with C2E and cloud service providers to support secure integration with customer systems