Information Systems Security Engineer

Bridge Core (BCore)•Chantilly, VA

6d•$180,000 - $200,000•Onsite

About The Position

Bcore is hiring an Information Systems Security Engineer to support customer missions in Chantilly, Virginia. The role is part of the B/Core integration team and works with a government customer to ensure seamless integration of a commercial product into a customer network. The position focuses on engineering, implementing, and assessing security controls for cloud-hosted and hybrid information systems, supporting authorization and assessment activities, and helping protect the customer’s cyber interests.

Requirements

Demonstrated experience engineering, implementing, and assessing security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and agency assessment and authorization processes.
Hands-on experience securing cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged-access capabilities.
Experience translating security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs.
Experience developing and maintaining assessment and authorization artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages.
Ability to assess control implementation and effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure with technical teams and stakeholders.
Experience applying Zero Trust principles, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices to cloud and hybrid architectures.
Experience performing security engineering across the system lifecycle, including requirements analysis, architecture and design reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition.
Ability to collaborate effectively with cloud, network, application, database, cybersecurity, Oracle, and Government stakeholders and communicate technical security risks, decisions, and compliance status clearly.
Strong written and verbal communication skills, including the ability to produce security designs, test plans, evidence matrices, remediation plans, operating procedures, and executive-ready status briefings.

Responsibilities

Work with the B/Core integration team and government customer to ensure seamless integration of a commercial product into a customer network.
Engineer, implement, and assess security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and agency assessment and authorization processes.
Translate security requirements, architectures, data flows, and mission use cases into technical controls and documented security designs.
Develop and maintain assessment and authorization artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages.
Assess control implementation and effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure.
Apply Zero Trust principles and other secure design practices to cloud and hybrid architectures.
Perform security engineering throughout the system lifecycle, including requirements analysis, architecture and design reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition.
Collaborate with cloud, network, application, database, cybersecurity, Oracle, and Government stakeholders.
Communicate technical security risks, decisions, and compliance status, and produce security designs, test plans, evidence matrices, remediation plans, operating procedures, and executive-ready status briefings.