Information Systems Security Engineer (ISSE)

INFORMATION SYSTEMS SOLUTIONS, INC•Suitland, MD

1d•Onsite

About The Position

Information Systems Solutions (ISS) is seeking a mid-level Information Systems Security Engineer (ISSE) to support the Office of Naval Intelligence. The ISSE will be responsible for engineering, implementing, and maintaining security solutions across information systems and networks. This role involves close collaboration with system engineers, architects, cybersecurity analysts, developers, and program management to ensure systems are designed, built, and maintained in accordance with security best practices and applicable compliance frameworks such as RMF, NIST, DoD, and ISO. The position is 100% onsite.

Requirements

TS/SCI clearance
Certifications (IAT Level III): One of the following: CASP+, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH
Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related field (or equivalent experience).
3–6 years of experience in cybersecurity or information systems security engineering.
Knowledge of NAVINTEL ICD 503 RMF Implementation Policies and DoD/Navy cybersecurity directives.
Understanding of ISSO responsibilities per SECNAV M-5239.2.
Experience with NIST SP 800-53, RMF, DoD STIGs, and secure system architecture principles.
Familiarity with network architectures, operating systems, and cloud platforms.
Strong understanding of encryption, authentication, network security, and secure design patterns.

Nice To Haves

Hands-on experience with DevSecOps, CI/CD pipelines, or Infrastructure as Code (Terraform, Ansible).
Knowledge of containerization (Docker, Kubernetes) and microservices security best practices.
Experience with enterprise security solutions (SIEM, endpoint protection, IAM tools).
Prior work on Navy or IC programs requiring TS/SCI clearance.
Strong communication and documentation skills, capable of briefing leadership and technical teams.
Comprehension of key virtualization concepts.
Familiar with Cloud Computing, architecture and design/engineering concepts.
Familiar with the use of various code repositories and their function such as Github/Gitlab.
Understanding of the various distributions of LINUX.

Responsibilities

Develop and maintain system security artifacts, including System Security Plans (SSP), Security Assessment Reports (SAR), POA&Ms, and STIG compliance documentation.
Apply NAVINTEL ICD 503 Risk Management Framework (RMF) policies and DoD/Navy cybersecurity directives to system design and implementation.
Collaborate with ISSOs, ISSMs, program managers, and system engineers to ensure security controls are correctly implemented.
Support system categorization, control selection, and continuous monitoring per NIST SP 800-53 and RMF.
Provide guidance on secure architecture, encryption, authentication, network security, and system hardening.
Maintain familiarity with cloud environments (AWS, Azure), enterprise networks, and operating systems (Windows, Linux).
Familiar with GRC tools such as eMASS and Xacta.
Ability to work with key stakeholders to resolve vulnerabilities and answer STIG checklists.