Information Systems Security Engineer

bcore•Chantilly, VA

1d•$180,000 - $200,000•Onsite

About The Position

Bcore is hiring an Information Systems Security Engineer to support customer missions in Chantilly, Virginia. The role is an integral member of the B/Core integration team and works with the government customer to ensure seamless integration of a commercial product into a customer network. The position supports the company’s Mission Services division, which combines enterprise IT, cloud solutions, DevSecOps, systems engineering, software development, and operational support.

Requirements

Demonstrated experience engineering, implementing, and assessing security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and agency assessment and authorization processes.
Hands-on experience securing cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged-access capabilities.
Experience translating security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs.
Experience developing and maintaining A&A artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages.
Ability to assess control implementation and effectiveness; identify security gaps and residual risk; recommend remediation; and track corrective actions to closure with technical teams and stakeholders.
Experience applying Zero Trust principles, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices to cloud and hybrid architectures.
Experience performing security engineering across the system lifecycle, including requirements analysis, architecture and design reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition.
Ability to collaborate effectively with cloud, network, application, database, cybersecurity, Oracle, and Government stakeholders and clearly communicate technical security risks, decisions, and compliance status.
Strong written and verbal communication skills, including the ability to produce security designs, test plans, evidence matrices, remediation plans, operating procedures, and executive-ready status briefings.
TS/SCI with Poly clearance.

Responsibilities

Work as an integral member of the B/Core integration team and with the government customer to ensure seamless integration of a commercial product into a customer network.
Engineer, implement, and assess security controls for cloud-hosted information systems.
Translate security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs.
Develop and maintain authorization and accreditation artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages.
Assess control implementation and effectiveness; identify security gaps and residual risk; recommend remediation; and track corrective actions to closure.
Apply Zero Trust principles, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices to cloud and hybrid architectures.
Perform security engineering across the system lifecycle, including requirements analysis, architecture and design reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition.
Collaborate with cloud, network, application, database, cybersecurity, Oracle, and Government stakeholders.
Communicate technical security risks, decisions, and compliance status, and produce security designs, test plans, evidence matrices, remediation plans, operating procedures, and executive-ready status briefings.