Information Systems Security Engineer

CHAOS Industries•Los Angeles, CA

1d•$150,000 - $190,000•Onsite

About The Position

CHAOS Industries seeks an experienced Information System Security Engineer (ISSE) to serve as the primary security engineer for classified Information systems across one or more Program Security Authorization boundaries. The ISSE will take full ownership of the security engineering effort for our next generation classified processing environment – from initial system security architecture through Assessment and Authorization (A&A) and into sustained continuous monitoring once the system reaches Authority to Operate (ATO).

Requirements

Minimum Bachelor’s degree plus 7 years of Information Assurance / Information System Security experience.
Master’s degree and 5 years of relevant experience.
Possess a DoD 8140 Cyber Workforce IAT Level 2 or IAM level 1 certification
Strong knowledge of RMF, STIGs, system hardening, network security, secure architecture, and vulnerability management processes.
Experience working across hardware, software, networking, and mission system integration environments.
Active Top Secret Clearance with SCI eligibility

Nice To Haves

Experience supporting military aircraft, mission systems, CUAS, or tactical communication platforms.
Background supporting cybersecurity test events, airworthiness, or platform accreditation activities.
Strong knowledge in major cloud environments.

Responsibilities

Design and document system security architecture for classified and unclassified Information Systems, ensuring alignment with RMF (NIST 800-37), ICD 503, and applicable DoD/IC overlays.
Conduct and review security assessments, maintain system patches, risk analysis, and vulnerability scans (Nessus, ACAS, SCAP) to identify and remediate risks.
Evaluate proposed changes to hardware, software, and firmware for security impact; approve or reject changes in accordance with the Configuration Management (CM) process.
Oversee implementation and validation of STIG/SRG hardening requirements across Windows, Linux, and network infrastructure.
Run and interpret vulnerability scans (ACAS, SCAP or equivalent tools), triage findings, and drive remediation with the responsible engineering teams.
Maintain the system’s continuous monitoring strategy post- ATO, including tracking control effectiveness overtime and flagging drift.
Support incident response for accredited systems, including root-cause security analysis and reporting.
Architect, design, implement, support, and evaluate, security-focused tools, and services.
Develop and interpret security policies and procedures.
Ensure compliance with DCSA, DSS, and applicable IC community security policies across all assigned programs.