ISSE (Hybrid) -

Wyetech•San Antonio, TX

2d•$52 - $119•Hybrid

About The Position

Wyetech is seeking an experienced Information Systems Security Engineer (ISSE) to support the design, development, implementation, assessment, and authorization of secure information systems and network architectures in mission-critical Department of Defense environments. The role provides cybersecurity engineering expertise across complex, multi-tiered systems and multiple security enclaves with differing classification levels and data protection requirements, including distributed architectures, cloud-based systems, and Big Data applications. The ISSE collaborates with government stakeholders, cybersecurity professionals, systems engineers, and software development teams to implement security controls, assess operational risks, manage Risk Management Framework (RMF) documentation, and maintain system authorization packages. The position supports DoD accreditation and authorization processes, NIST SP 800-53 controls, DISA STIGs and SRGs, vulnerability management, continuous monitoring, and security remediation activities. This is a hybrid position based in San Antonio, Texas, with approximately one to two days onsite per week. Candidates must be flexible to accommodate mission- and operations-driven changes to the onsite schedule. An active TS/SCI clearance with Full Scope Polygraph, U.S. citizenship, and applicable DoD 8140 IAT Level II qualifications are required. Candidates must meet one of the listed education and experience combinations: a related technical bachelor's degree and nine years of relevant experience; a related technical master's degree and seven years of relevant experience; or a high school diploma or equivalent and thirteen years of relevant experience. The listed hourly pay range is $51.84–$118.91. Wyetech describes a retirement contribution, paid time off, voluntary benefits, referral bonus eligibility, supported-contract mobility, company events, and complimentary branded clothing orders.

Requirements

Active TS/SCI security clearance with Full Scope Polygraph; clearance must be maintained throughout employment.
U.S. citizenship.
Meet applicable DoD 8140 Information Assurance Technical (IAT) Level II qualification requirements and maintain required certification and program access.
Meet one of these education and experience combinations: related technical bachelor's degree plus nine years of relevant ISSE experience supporting large, multi-tiered programs; related technical master's degree plus seven years of relevant experience; or high school diploma/equivalent plus thirteen years of relevant ISSE experience.
Demonstrated ISSE experience supporting large, complex, multi-tiered programs and enterprise environments.
Experience designing, implementing, and evaluating secure system and network architectures across enclaves with differing classification and data protection requirements.
Experience implementing DoD system accreditation and authorization processes, including DIACAP or RMF; RMF experience is preferred.
Strong understanding of NIST SP 800-53, including control inheritance, security control implementation and assessment, and authorization artifact generation.
Experience creating, reviewing, editing, and maintaining system authorization documentation under federal and DoD cybersecurity policies.
Hands-on experience navigating RMF workflows, uploading authorization artifacts, and managing POA&Ms in eMASS, Xacta, or equivalent systems.
Experience interpreting, applying, and validating DISA STIGs and SRGs.
Experience using vulnerability management systems, automated security scanning tools, and security compliance platforms.
Experience reviewing vulnerability scan results, documenting security deficiencies, implementing mitigation strategies, and tracking remediation.
Experience evaluating cybersecurity and operational risks associated with open-source, COTS, and GOTS software components.
Working knowledge of TCP/IP protocols and services, computer architectures, network topologies, and secure networking principles.
Understanding of distributed computing architectures, cloud-based systems, and security considerations for Big Data applications.
Experience performing security planning, risk assessments, security control evaluations, risk analysis, and risk management.
Ability to recommend system-level security solutions and collaborate with engineering and development teams to achieve required security postures.
Strong knowledge of federal and DoD information assurance policies, procedures, and cybersecurity requirements.
Ability to independently assess complex technical issues, interpret security requirements, and develop defensible compliance processes when established procedures are unavailable.
Strong analytical, technical documentation, communication, and interpersonal skills.
Ability to work independently and collaboratively with multidisciplinary engineering and cybersecurity teams.
Ability to work onsite approximately one to two days per week in San Antonio and accommodate mission-driven schedule changes.

Nice To Haves

CISSP-ISSEP certification is highly desired.
Experience developing Bash scripts for security administration, compliance validation, or operational automation.
Experience supporting containerized applications and infrastructure using Kubernetes.
Experience creating network diagrams, system architecture diagrams, and technical documentation using Microsoft Visio or draw.io.
Experience administering, configuring, or securing Red Hat Enterprise Linux (RHEL) environments.
Experience supporting and securing Amazon Web Services (AWS) infrastructure and services.
RMF experience is preferred.

Responsibilities

Design, evaluate, and support secure system and network architectures across multiple enclaves with differing classification and data protection requirements.
Create, review, edit, and maintain security authorization documentation in accordance with federal and DoD cybersecurity policies.
Implement and support DoD RMF processes throughout system development, assessment, authorization, and operational lifecycles.
Apply NIST SP 800-53 security controls, evaluate control inheritance, and develop compliance and authorization artifacts.
Use eMASS, Xacta, or equivalent RMF systems to manage authorization workflows, upload documentation, track assessments, and maintain POA&Ms.
Interpret and apply DISA STIGs and SRGs to assess system configurations and support compliance.
Conduct vulnerability assessments, analyze automated scan results, identify deficiencies, and recommend remediation strategies.
Track security findings, mitigation activities, and corrective actions for continuous monitoring and authorization maintenance.
Assess cybersecurity and operational risks from integrating open-source, COTS, and GOTS software components into mission systems.
Provide security planning, assessment, risk analysis, and risk management support for enterprise information systems and applications.
Recommend technical solutions to meet security requirements, mitigate vulnerabilities, and improve system security posture.
Collaborate with software developers, systems engineers, and infrastructure teams to incorporate security requirements into system architectures and application designs.
Support the Government in establishing, evaluating, and enforcing trusted relationships among interconnected systems and external architectures.
Apply federal and DoD information assurance policies, procedures, and technical controls to secure networking, computing, and enclave environments.
Evaluate TCP/IP communications, network architectures, system interfaces, and infrastructure components for potential security vulnerabilities.
Support cybersecurity engineering for distributed architectures, cloud-based systems, and Big Data applications.
Facilitate requirements gathering, technical exchanges, engineering reviews, and cybersecurity discussions with government and contractor stakeholders.
Follow established security engineering and compliance processes and develop defensible procedures when formal guidance is unavailable.
Maintain authorization packages, compliance documentation, risk assessments, and supporting technical artifacts.
Support continuous monitoring, security control assessments, vulnerability remediation, and ongoing authorization activities.
Prepare technical findings, risk assessments, mitigation recommendations, and compliance reports for government and program leadership.
Collaborate with cybersecurity, systems engineering, networking, and software development teams to resolve complex security issues.
Support improvements to security engineering processes, compliance workflows, documentation standards, and risk management practices.
Perform additional information systems security engineering responsibilities as required to support mission objectives.

Benefits

Company automatically contributes 20% of each employee's gross compensation to a Simplified Employee Pension (SEP) IRA, with no employee matching requirement; contributions are fully vested from day one.
PTO plan of up to 200 hours annually, with the option to adjust PTO allocation at the start of each calendar year.
Voluntary medical plan options, some with a Health Savings Account (HSA).
Vision and dental benefits.
Life and AD&D benefits.
Short- and long-term disability coverage.
Hospital indemnity, accident, and critical illness insurance.
Optional identity theft and legal protection services.
Employee referral bonus eligibility up to $10,000.
Mobility among Wyetech-supported contracts.
Team-building events, including monthly lunches, a summer company picnic, and an annual holiday party.
Two complimentary branded clothing orders annually.