Information Systems Security Engineer (ISSE) (TS/SCI Clearance with Full Scope Polygraph Required)

J&T Business Consulting•Annapolis, MD

4d•Onsite

About The Position

Seeking a Senior Information Systems Security Engineer (ISSE) to support large-scale, mission-critical systems across a complex, geographically distributed network environment in Annapolis Junction, MD. In this role, you will serve as a security subject matter expert, validating system security requirements, designing robust security architectures, and executing hands-on vulnerability assessments. You will collaborate closely with Systems Engineering, Test, and Integration teams in an Agile environment to ensure hardware and software implementations meet stringent compliance standards and maintain a resilient operational security posture.

Requirements

Active TS/SCI with Polygraph.
Minimum of 12 years of experience as an ISSE on large technical programs.
DoD 8570/8140 IASAE Level 2 or Level 3 certification.
Proven experience applying the Risk Management Framework (RMF) and formulating/assessing IT security policies and compliance standards.
Hands-on experience with vulnerability scanning and network analysis tools (e.g., Nessus, NMAP, Wireshark), communication protocols, encryption techniques/tools, and web services.
In-depth experience with the secure configuration and hardening of standard enterprise desktop and server operating systems.

Nice To Haves

Bachelor’s degree in Computer Science, Information Assurance, Information Systems Security Engineering, or a related field.
Professional certifications: CISSP or CISSP-ISSEP.
5+ years of experience with Defense-in-Depth principles (access control, PKI, IAM, network and enterprise security architectures).
Experience with scripting languages and automated testing workflows.
Experience with advanced penetration testing tools, incident response, and application security evaluations for firewall designs and network boundaries.

Responsibilities

Validate and establish system security designs, architectures, and requirements for major system components and distributed network interfaces.
Apply the Risk Management Framework (RMF) to lead security planning, risk assessments, control evaluations, continuous monitoring, and system authorization activities.
Perform vulnerability testing, scanning, auditing, and assessment of system configurations using standard security tools (e.g., Nessus, NMAP, Wireshark).
Collaborate with engineering, test, and agile development teams during Program Increment (PI) planning to formulate security compliance requirements for new capabilities.
Plan and conduct security verification testing for Type 1 cryptographic and security-relevant devices.
Formulate, coordinate, implement, and enforce information systems security policies, technical standards, and configuration baselines.
Evaluate the operational security impact of new software deployments, identify vulnerabilities and attack vectors, and drive end-to-end remediation.
Act as a primary technical advisor on security architecture and risk trade-offs for Program Managers, internal engineering teams, and customer stakeholders.