ISSE (Hybrid)

Wyetech•San Antonio, TX

19h•Hybrid

About The Position

Wyetech is seeking an Information Systems Security Engineer to support the design, development, implementation, and accreditation of secure information systems and network architectures in mission-critical Department of Defense environments. The role performs security engineering across multiple enclaves with differing classification and data-protection requirements, including distributed architectures, cloud-based systems, and Big Data applications. It applies DoD Risk Management Framework (RMF) processes and information assurance requirements throughout system development and operation. The engineer collaborates with government stakeholders, cybersecurity professionals, system and network engineers, and software development teams to assess risks, implement technical safeguards, maintain authorization documentation, and ensure compliance with federal and DoD security policies. The position is hybrid, with approximately one to three days onsite per week in San Antonio, Texas; onsite schedules may change to meet mission and operational requirements. Candidates must have an active TS/SCI clearance with Full Scope Polygraph, U.S. citizenship, and a qualifying DoD IAT Level II certification. Candidates must meet one of the stated education and experience combinations: a related technical bachelor’s degree and nine years of relevant experience; a related technical master’s degree and seven years of relevant experience; or a high school diploma or equivalent and thirteen years of relevant experience. The stated hourly pay range is $51.84–$118.91; compensation varies based on factors including contract rates, education, experience, skills, certifications, and location. Wyetech describes a corporate culture focused on solving problems for federal government customers. Benefits include an automatic SEP IRA contribution equal to 20% of gross compensation, up to 200 hours of annual PTO, voluntary benefit plans, referral bonus eligibility, mobility among supported contracts, team-building events, and two complimentary branded clothing orders annually.

Requirements

Active TS/SCI security clearance with Full Scope Polygraph; clearance must be maintained.
U.S. citizenship and ability to maintain applicable security clearance, certification, and program access requirements.
Qualifying DoD 8570 Information Assurance Technical (IAT) Level II certification, such as CompTIA Security+, SSCP, CCNA Security, or GSEC; certification must align with applicable contract and DoD requirements.
Meet one education and experience combination: related technical bachelor’s degree plus nine years of relevant Information Systems Security Engineering experience supporting large, multi-tiered programs; related technical master’s degree plus seven years of relevant experience; or high school diploma/equivalent plus thirteen years of relevant experience.
Experience performing information systems security engineering for large, complex, multi-tiered programs and enterprise environments.
Experience designing and evaluating secure system and network architectures across enclaves with differing classification and data-protection requirements.
Experience implementing DoD system accreditation and authorization processes, including DIACAP or RMF; RMF experience is preferred.
Thorough understanding of federal and DoD cybersecurity policies, security authorization requirements, and information assurance principles.
Experience creating, reviewing, maintaining, and validating system authorization documentation for completeness, accuracy, and regulatory compliance.
Experience assessing operational and cybersecurity risks associated with integrated open-source, GOTS, and COTS software components.
Experience using vulnerability management platforms, automated security scanning tools, and system accreditation record systems.
Working knowledge of TCP/IP protocols and services, computer architectures, network topologies, and secure network design principles.
Experience implementing and evaluating DISA STIGs and SRGs.
Experience identifying vulnerabilities, mitigating and remediating them, tracking remediation, validating compliance, and analyzing automated security scan results.
Knowledge of distributed system architectures, cloud-based computing environments, and security considerations for Big Data applications.
Ability to perform security planning, risk assessments, risk analysis, and risk management activities.
Experience recommending system-level security solutions and collaborating with engineering and development teams to meet security requirements.
Ability to independently evaluate complex technical issues, establish defensible security processes, and communicate findings to technical and nontechnical stakeholders.
Strong interpersonal, analytical, technical documentation, and problem-solving skills.
Ability to work independently and collaboratively in multidisciplinary engineering and cybersecurity teams.
Ability to work onsite approximately one to three days per week in San Antonio, Texas, and accommodate mission-driven schedule changes.

Nice To Haves

CISSP-ISSEP certification is highly desired.
Experience implementing and maintaining RMF authorization packages for complex DoD information systems.
Experience supporting cloud-based architectures, distributed computing environments, and Big Data platforms.
Experience with security engineering across multiple classification domains and interconnected enclaves.
Experience supporting secure system integration, enterprise cybersecurity architecture, and authorization activities involving external systems.
Familiarity with evolving DoD cybersecurity compliance requirements, security engineering methodologies, and continuous monitoring practices.

Responsibilities

Design, assess, and implement secure system and network architectures across enclaves with varying classification and data-protection requirements.
Create, review, edit, and maintain security authorization documentation in accordance with federal and DoD cybersecurity policies.
Implement and support DoD RMF accreditation and authorization processes throughout system development and operation.
Develop and maintain security documentation, risk assessments, compliance artifacts, and supporting authorization materials.
Evaluate operational risks associated with integrating open-source, COTS, and GOTS software components into mission-critical systems.
Use vulnerability management systems, automated security scanning tools, and accreditation tracking platforms to assess system security posture.
Review vulnerability scan results, identify security deficiencies, recommend corrective actions, and track remediation activities.
Apply DISA STIGs and SRGs to assess configurations, evaluate compliance, and support vulnerability mitigation.
Provide security planning, assessment, risk analysis, and risk management support for enterprise systems and applications.
Recommend system-level security solutions to address technical requirements, mitigate vulnerabilities, and improve security posture.
Collaborate with software developers, systems engineers, network engineers, and cybersecurity personnel to incorporate security requirements into system designs and implementations.
Support the Government in evaluating, establishing, and enforcing trusted relationships among interconnected systems and external architectures.
Apply information assurance policies, procedures, and technical controls to secure networking, computing, and enclave environments.
Evaluate network protocols, system architectures, communication interfaces, and infrastructure components for potential security risks.
Support security engineering involving distributed architectures, cloud-based systems, and Big Data applications.
Facilitate technical information exchanges, requirements-gathering sessions, engineering reviews, and cybersecurity discussions with stakeholders.
Follow established security engineering and compliance processes and develop defensible procedures when formal processes are not prescribed.
Support continuous monitoring, security control assessments, compliance reviews, and ongoing authorization maintenance.
Prepare technical findings, risk assessments, recommendations, and security documentation for government and program leadership.
Coordinate with government representatives and engineering teams to resolve security issues and maintain compliance with mission requirements.
Perform additional information systems security engineering responsibilities as required to support program objectives.

Benefits

Automatic employer contribution of 20% of gross compensation to a SEP IRA, with no employee matching requirement; contributions are fully vested from day one.
PTO plan of up to 200 hours annually, with flexibility to adjust PTO allocation at the start of each calendar year.
Voluntary medical plan options, some with a Health Savings Account (HSA).
Vision and dental benefits.
Life and AD&D benefits.
Short- and long-term disability coverage.
Hospital indemnity, accident, and critical illness insurance.
Optional identity theft and legal protection services.
Employee referral bonus eligibility up to $10,000.
Mobility among Wyetech-supported contracts and work locations.
Team-building events, including monthly lunches, a summer company picnic, and an annual holiday party.
Two complimentary branded clothing orders annually.