Information Systems Security Engineer

Edgesource Corporation•Chantilly, VA

1d•$190,000 - $210,000

About The Position

Edgesource Corporation is seeking an Information Systems Security Engineer (ISSE) to provide cybersecurity engineering and Assessment and Authorization (A&A) support for a client’s portfolio. The role integrates cybersecurity requirements into system architecture, design, development, testing, deployment, and operations, while maintaining security authorization artifacts and supporting continuous monitoring. The ISSE helps ensure systems retain required security designations and approvals throughout their lifecycle.

Requirements

Active TS/SCI with Poly.
Professional experience performing information systems security engineering, security authorization, or information assurance work for complex systems.
Knowledge of security control implementation, risk assessment, vulnerability management, secure configuration, and continuous monitoring.
Experience producing and maintaining cybersecurity documentation, control evidence, risk records, and authorization packages.
Ability to collaborate with technical teams and translate security requirements into implementable engineering actions.
Strong technical writing, organization, analysis, and stakeholder communication skills.
Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent relevant experience.

Nice To Haves

Experience supporting Intelligence Community, Department of Defense, or other federal Assessment and Authorization processes.
Relevant cybersecurity certification such as Security+, CISSP, CGRC, CASP+/SecurityX, or equivalent.
Experience securing cloud, hybrid, containerized, data-intensive, or DevSecOps environments.

Responsibilities

Define, document, and maintain cybersecurity and information assurance requirements for Sponsor systems and applications.
Support Assessment and Authorization activities throughout the system lifecycle in accordance with Sponsor policy and the applicable Risk Management Framework.
Develop and maintain system security plans, control implementation statements, architecture diagrams, risk assessments, assessment evidence, and authorization artifacts.
Partner with architects, engineers, developers, administrators, testers, and system owners to integrate security into system design and implementation.
Assess proposed system, software, infrastructure, network, data, and configuration changes for cybersecurity impact.
Coordinate vulnerability scanning, secure configuration assessment, remediation tracking, and validation of corrective actions.
Support continuous monitoring, recurring security control assessments, audit preparation, and ongoing authorization activities.
Track security findings, risks, mitigations, exceptions, and Plans of Action and Milestones through closure.
Review access controls, authentication, authorization, encryption, logging, auditing, interfaces, data flows, and boundary protections for compliance and risk.
Provide cybersecurity guidance during incident response, deployments, system transitions, and operational changes.
Maintain accurate security documentation, evidence repositories, assessment records, control mappings, and authorization status.
Communicate cybersecurity risks, requirements, findings, and remediation priorities to technical and non-technical stakeholders.
Participate in design reviews, technical exchanges, change-control activities, and security working groups.