Information Systems Security Engineer

Planet Technologies•Washington, DC

22h•$130,000 - $190,000•Onsite

About The Position

Planet Technologies is seeking an Information Systems Security Engineer (ISSE) to support public-sector projects. The role integrates security engineering principles, requirements, and controls into information systems throughout the Systems Development Life Cycle (SDLC), from design and development through testing and sustainment. The ISSE serves as the primary security engineering authority for system owners, ISSOs, and development teams working to achieve and maintain a system’s Authorization to Operate (ATO). The engineer supports risk mitigation and security control implementation under NIST SP 800-53 and the Risk Management Framework (RMF), contributes to ATO documentation, validates technical security controls, reviews configurations against DISA STIGs, and supports vulnerability management. The position requires working onsite five days a week in Washington, DC, and an active Top Secret clearance.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
Ideally eight years of experience.
Proven experience in a Federal environment integrating security engineering principles, requirements, and controls into information systems using the SDLC.
Experience serving as the primary security engineering authority supporting system owners, ISSOs, and development teams in achieving and maintaining ATO.
Experience participating in design reviews and recommending ways to mitigate risks.
Experience with NIST SP 800-53/RMF and developing SSPs, SARs, and POA&Ms for ATO packages.
Experience supporting vulnerability management and remediation prioritization and assessing the security impact of proposed system changes.
Ability to prepare effective technical security documentation.
Proven success advising ISSOs, program managers, and developers throughout the system lifecycle.
Active Top Secret clearance.
Ability and willingness to work onsite five days a week in Washington, DC.

Nice To Haves

Certifications including CISSP, ISSEP, Security+, CASP+/SecurityX, CISM, or CSSP.

Responsibilities

Integrate security engineering principles, requirements, and controls into information systems throughout the SDLC.
Serve as the primary security engineering authority supporting system owners, ISSOs, and development teams in achieving and maintaining ATO.
Identify and document information security requirements during system design, participate in design reviews, and recommend engineering solutions to mitigate risks.
Support security control categorization, selection, implementation, and assessment under NIST SP 800-53/RMF; develop SSPs, SARs, and POA&Ms for ATO packages.
Engineer and validate technical security controls, including access control, auditing, encryption, and boundary protection; conduct or support security testing to verify control effectiveness.
Review system configurations against DISA STIGs, support vulnerability management and remediation prioritization, and assess the security impact of proposed system changes.
Prepare technical security documentation, including architecture diagrams, control implementation statements, and interconnection security agreements.
Advise ISSOs, program managers, and developers throughout the system lifecycle.