Information Systems Security Engineer (ISSE)

teKnoluxion•Reston, VA

11d•$130,000 - $155,000•Onsite

About The Position

At Bcore, our strength comes from how we deliver impact to the mission. Whether it’s architecting critical IT solutions, producing actionable intelligence, or developing cutting edge technology, we succeed because of the expertise, collaboration, and agility of our teams. Our Mission Services division combines enterprise IT, cloud solutions, DevSecOps, systems engineering, software development, and operational support. Bcore accelerates decisive advantage for warfighters and intelligence professionals by fusing human insight, rapid-fire engineering, precision-measured outcomes, and relentless grit into mission-ready solutions. Do you want to join a team that is building tailored technical solutions to modernize our government’s mission and our client’s business? Do you have a desire to change how people work? Are you interested in helping to protect our nation’s cyber interests? Join our growing team as a Information Systems Security Engineer (ISSE), supporting the NGA customer mission.

Requirements

Active TS/SCI with CI poly
Demonstrated experience engineering, implementing, and assessing security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and agency assessment and authorization (A&A) processes.
Proven hands-on experience securing Cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged-access capabilities.
Experience translating security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs.
Experience developing and maintaining A&A artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages.
Ability to assess control implementation and effectiveness; identify security gaps and residual risk; recommend remediation; and track corrective actions to closure with technical teams and stakeholders.
Experience applying Zero Trust principles, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices to cloud and hybrid architectures.
Experience performing security engineering activities across the system lifecycle, including requirements analysis, architecture and design reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition.
Ability to collaborate effectively with cloud, network, application, database, cybersecurity, Oracle, and Government stakeholders and communicate technical security risks, decisions, and compliance status clearly.
Strong written and verbal communication skills, including the ability to produce security designs, test plans, evidence matrices, remediation plans, operating procedures, and executive-ready status briefings.

Nice To Haves

Associate- or Professional-level cloud certification in Security, Architect, Networking, or Cloud Operations.
Experience supporting classified, Intelligence Community, Government, or other highly regulated systems with TS/SCI security requirements.
Experience with vulnerability-management, configuration-compliance, SIEM, SOAR, endpoint-security, and cloud-security-posture-management tools and processes.
Experience with infrastructure as code and automated security configuration, including Terraform, OCI Resource Manager, Ansible, APIs, or scripting.
Experience supporting security assessments, authorization decisions, control validation, audit readiness, and continuous-monitoring activities in an agency environment.

Responsibilities

Engineering, implementing, and assessing security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and agency assessment and authorization (A&A) processes.
Securing Cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged-access capabilities.
Translating security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs.
Developing and maintaining A&A artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages.
Assessing control implementation and effectiveness; identify security gaps and residual risk; recommend remediation; and track corrective actions to closure with technical teams and stakeholders.
Applying Zero Trust principles, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices to cloud and hybrid architectures.
Performing security engineering activities across the system lifecycle, including requirements analysis, architecture and design reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition.
Collaborating effectively with cloud, network, application, database, cybersecurity, Oracle, and Government stakeholders and communicate technical security risks, decisions, and compliance status clearly.
Producing security designs, test plans, evidence matrices, remediation plans, operating procedures, and executive-ready status briefings.