Information Systems Security Engineer

Galapagos Federal Systems LLC.•Washington, DC

23h•$160,000 - $170,000

About The Position

Galapagos Federal Systems LLC is seeking an enthusiastic and well-qualified Information Systems Security Engineer (ISSE) to join their team. This role involves providing cybersecurity engineering expertise for network solutions, ensuring adherence to U.S. Government and Intelligence Community requirements, including ICD 503, RMF, and NIST/CNSSI guidance. The ISSE will integrate security controls into system architectures, support Assessment and Authorization (A&A) activities, and collaborate with various teams to ensure systems meet security, compliance, and operational standards throughout their lifecycle.

Requirements

Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
5+ years of experience in information assurance, cybersecurity engineering, or Assessment & Authorization (A&A) supporting DoD or Intelligence Community (IC) systems.
Demonstrated experience in information assurance and cybersecurity engineering within Department of Defense (DoD) or Intelligence Community (IC) environments.
Proven experience supporting Intelligence Community Directive (ICD) 503 Certification and Accreditation (C&A) activities.
Strong working knowledge of the Risk Management Framework (RMF) and applicable cybersecurity standards and guidance, including NIST SP 800-53 (Security and Privacy Controls), NIST SP 800-37 (Risk Management Framework), NIST SP 800-39 (Managing Information Security Risk), NIST SP 800-30 (Risk Assessment Guide), and CNSSI 1253 (Security Categorization and Control Selection).
Experience developing, reviewing, and maintaining Assessment and Authorization (A&A) documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
Familiarity with engineering and operational environments supporting classified information systems.
Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, Engineering, or a related technical discipline.
Equivalent experience may be substituted in lieu of a degree.
Must meet DoD 8140 education and certification requirements.
Must maintain required technical and cybersecurity training as defined by role and system assignment.
Must be a U.S. Citizen.

Nice To Haves

CompTIA Security+ CE
CISSP
CAP (Certified Authorization Professional)
CASP+
CISM

Responsibilities

Provide cybersecurity engineering support for engineering and operational network solutions.
Ensure compliance with Information Assurance (IA) and cybersecurity requirements mandated by ICD 503, DoD Instruction 8510.01 (RMF for DoD Systems), Applicable NIST and CNSSI publications.
Support and prepare Assessment and Authorization (A&A) documentation, artifacts, and procedures.
Engineer and implement security controls in alignment with NIST SP 800-53.
Participate in system categorization, control selection, implementation, assessment, and continuous monitoring.
Interface with IA team members, ISSOs and ISSMs, Other security disciplines (industrial, physical, special programs security), Program personnel and government security representatives.
Support certification and accreditation activities under ICD 503.
Ensure cybersecurity considerations are integrated into system design, deployment, and operations.
Maintain required cybersecurity and technical training to support assigned systems.
Provide technical guidance and recommendations to program leadership on security risks and mitigation strategies.
Experience supporting Intelligence Community systems.
Familiarity with multi-domain security environments.
Ability to operate effectively in high-compliance, mission-critical environments.
Strong attention to detail and risk-based decision making.