Information Systems Security Engineer

Spear AI • Washington, DC

1d • Hybrid

About The Position

We are seeking an Information Systems Security Engineer (ISSE) to design, build, and integrate security into all information systems supporting the program, serving as the hands-on technical expert who translates Intelligence Community security requirements into engineered, implemented, and validated solutions. Spear AI is a growing defense contracting company dedicated to delivering cutting-edge solutions that support our nation's security. As we expand, we're building a culture where innovation meets mission-critical work. We operate with a flat organizational structure that empowers every team member to make an impact, collaborate directly with leadership, and contribute to projects that matter. Whether you're joining our Hardware, Software, or Services division, you'll work alongside talented professionals who are committed to excellence and advancing the capabilities that keep our nation safe and secure. Spear AI builds sonobuoy sensors that are deployed into the water and collect edge data. We also work with the U.S. Navy to collect and process their SONAR data. You'll have an opportunity to work on real-world projects that directly impact warfighter capabilities and mission success.

Requirements

• Active TS/SCI required; must be able to obtain a Polygraph.
• Hands-on expertise implementing NIST RMF, ICD 503, CNSSI 1253, and NIST SP 800-53 controls in classified environments
• Demonstrated experience engineering systems through ATO — building the technical body of evidence, not just documenting it
• Strong background in system hardening, vulnerability management, and security tooling (STIGs, SCAP, ACAS/Nessus) on JWICS or similar classified networks
• Experience with secure architecture design across cloud, on-prem, and cross-domain environments
• DoW 8570/8140 IASAE Level II compliance required (Level III preferred)

Nice To Haves

• Experience securing AI/ML systems and data pipelines
• AWS GovCloud or Azure Government security engineering experience
• DevSecOps tooling experience (container security, pipeline scanning, IaC security)
• Cross Domain Solution (CDS) integration experience
• Military Intelligence or IC experience

Responsibilities

• Design and engineer security architectures for program information systems, ensuring security is built in from the ground up rather than bolted on
• Translate RMF, ICD 503, CNSSI 1253, and NIST SP 800-53 requirements into implemented, testable technical controls across multiple classified systems
• Develop and maintain the body of evidence supporting ATO packages — system security plans, control implementation details, test results, and supporting artifacts — in partnership with the ISSM and ISSOs
• Harden systems to DISA STIG and IC baselines; run and remediate vulnerability scans (ACAS/Nessus, SCAP) across the environment
• Integrate security into the development pipeline (DevSecOps), advising engineers on secure design, secure coding, and control implementation early in the lifecycle
• Engineer and tune continuous monitoring, auditing, and logging capabilities for classified systems
• Assess security impacts of proposed system changes and support configuration management boards
• Engineer security for AI/ML pipelines and data platforms, addressing emerging threats unique to model training, data ingestion, and edge deployment
• Support incident response with technical analysis, containment engineering, and remediation
• Coordinate with ISSM/ISSO staff, system owners, and government security stakeholders to keep engineering decisions aligned with mission requirements and applicable directives

Benefits

• Unlimited PTO
• Dedicated Sick Time
• Comprehensive Health & Benefits – Medical, dental, and vision coverage
• 11 Paid Holidays
• Professional Development
• Collaborative Environment
• Mission-Driven Work
• Growth Opportunities
• 401(k) with company match.
• Onsite / Remote / Flexible work arrangements or hybrid options (position dependent).
• Relocation assistance (position dependent).
• Referral bonuses.
• Performance bonuses.
• Life insurance and disability coverage.
• Technology home office setup stipend.
• Professional certification reimbursement (position dependent).

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed