ISSE (Hybrid) - 29506

Wyetech•Columbia, MD

18h•Hybrid

About The Position

Wyetech is seeking an experienced Information Systems Security Engineer (ISSE) to support the design, development, implementation, assessment, and authorization of secure information systems and network architectures in mission-critical Department of Defense environments. The role provides cybersecurity engineering expertise across complex, multi-tiered systems and multiple security enclaves with differing classification and data protection requirements, including distributed architectures, cloud-based systems, and Big Data applications. The ISSE works with government stakeholders, cybersecurity professionals, system engineers, software developers, and infrastructure teams to implement security controls, assess operational risks, manage Risk Management Framework (RMF) documentation, and maintain authorization packages throughout system development and operations. The position is hybrid, with approximately one to two days per week onsite in Columbia, Maryland; onsite schedules may change based on mission and operational requirements. An active TS/SCI clearance with Full Scope Polygraph and U.S. citizenship are required. Candidates must meet one of these education and experience combinations: a bachelor's degree in a related technical discipline and nine years of relevant ISSE experience; a master's degree in a related technical discipline and seven years of relevant experience; or a high school diploma or equivalent and thirteen years of relevant ISSE experience. Candidates must also meet applicable DoD 8140 IAT Level II certification requirements. The stated hourly pay range is $51.84–$118.91; compensation varies based on factors including contract rates, education, experience, skills, certifications, and location.

Requirements

Active TS/SCI security clearance with Full Scope Polygraph; clearance and program access requirements must be maintained throughout employment.
U.S. citizenship.
Meet applicable DoD 8140 Information Assurance Technical (IAT) Level II qualification requirements.
One of the following education and experience combinations: bachelor's degree in a related technical discipline plus nine years of relevant ISSE experience; master's degree in a related technical discipline plus seven years of relevant experience; or high school diploma or equivalent plus thirteen years of relevant ISSE experience.
Demonstrated ISSE experience supporting large, complex, multi-tiered programs and enterprise environments.
Experience designing, implementing, and evaluating secure system and network architectures across enclaves with differing classification and data protection requirements.
Experience with DoD system accreditation and authorization processes, including DIACAP or RMF; RMF experience is preferred.
Working knowledge of NIST SP 800-53, including control inheritance, control implementation and assessment, and authorization artifact generation.
Experience creating, reviewing, editing, and maintaining system authorization documentation under federal and DoD cybersecurity policies.
Hands-on experience with RMF workflows, security authorization artifact uploads, and POA&M management in eMASS, Xacta, or equivalent systems.
Experience interpreting, applying, and validating DISA STIGs and SRGs.
Experience with vulnerability management systems, automated security scanning tools, and security compliance platforms.
Experience reviewing vulnerability scan results, documenting findings, implementing mitigation strategies, and tracking remediation.
Experience evaluating cybersecurity and operational risks associated with open-source, COTS, and GOTS software components.
Working knowledge of TCP/IP protocols and services, computer architectures, network topologies, and secure networking principles.
Understanding of distributed computing architectures, cloud-based systems, and security considerations for Big Data applications.
Experience with security planning, risk assessments, security control evaluations, risk analysis, and risk management.
Ability to recommend system-level security solutions and collaborate with engineering and development teams to achieve required security postures.
Strong knowledge of federal and DoD information assurance policies, procedures, and cybersecurity requirements.
Ability to independently assess complex technical issues, interpret requirements, and develop defensible compliance processes when established procedures are unavailable.
Strong analytical, technical documentation, communication, and interpersonal skills.
Ability to work independently and collaboratively with multidisciplinary engineering and cybersecurity teams.
Ability to work onsite approximately one to two days per week in Columbia, Maryland, and accommodate mission-driven schedule changes.
Must possess and maintain applicable security clearance, certification, and program access requirements throughout employment.

Nice To Haves

CISSP-ISSEP certification is highly desired.
Experience developing Bash scripts to automate security administration, compliance validation, or operational processes.
Experience supporting containerized applications and infrastructure using Kubernetes.
Experience creating network diagrams, system architecture diagrams, and technical documentation using Microsoft Visio or draw.io.
Experience administering, configuring, or securing Red Hat Enterprise Linux (RHEL) environments.
Experience supporting and securing Amazon Web Services (AWS) cloud infrastructure and services.
Qualifying DoD 8140 IAT Level II certifications identified include CompTIA Security+, SSCP, CCNA Security, and GSEC; acceptance must align with current DoD workforce requirements and contract provisions.

Responsibilities

Design, evaluate, and support secure system and network architectures across multiple enclaves with differing classification and data protection requirements.
Create, review, edit, and maintain security authorization documentation in accordance with federal and DoD cybersecurity policies.
Implement and support DoD RMF processes throughout system development, assessment, authorization, and operations.
Apply NIST SP 800-53 security controls, evaluate control inheritance, and develop compliance and authorization artifacts.
Use eMASS, Xacta, or equivalent RMF systems to manage authorization workflows, upload documentation, track assessments, and maintain POA&Ms.
Interpret and apply DISA STIGs and SRGs to assess system configurations and support compliance.
Conduct vulnerability assessments; analyze automated scan results; identify security deficiencies; and recommend remediation strategies.
Track security findings, mitigation activities, and corrective actions in support of continuous monitoring and authorization maintenance.
Assess cybersecurity and operational risks associated with integrating open-source, COTS, and GOTS software components into mission systems.
Provide security planning, assessment, risk analysis, and risk management support for enterprise information systems and applications.
Recommend system-level technical solutions to address security requirements, mitigate vulnerabilities, and improve security posture.
Collaborate with software developers, system engineers, and infrastructure teams to incorporate security requirements into architectures and application designs.
Support the Government in establishing, evaluating, and enforcing trusted relationships among interconnected systems and external architectures.
Apply federal and DoD information assurance policies, procedures, and technical controls to develop secure networking, computing, and enclave environments.
Evaluate TCP/IP communications, network architectures, system interfaces, and infrastructure components for potential security vulnerabilities.
Support cybersecurity engineering for distributed architectures, cloud-based systems, and Big Data applications.
Facilitate requirements gathering, technical information exchanges, engineering reviews, and cybersecurity discussions with government and contractor stakeholders.
Follow established security engineering and compliance processes and develop defensible procedures when formal guidance is unavailable.
Maintain authorization packages, compliance documentation, risk assessments, and supporting technical artifacts.
Support continuous monitoring, security control assessments, vulnerability remediation, and ongoing authorization activities.
Prepare technical findings, risk assessments, mitigation recommendations, and compliance reports for government and program leadership.
Collaborate with cybersecurity, systems engineering, networking, and software development teams to resolve complex security issues.
Support improvements to security engineering processes, compliance workflows, documentation standards, and risk management practices.
Perform additional ISSE responsibilities as required to support mission objectives.

Benefits

SEP IRA contribution equal to 20% of each employee's gross compensation, with no employee matching requirement; contributions are fully vested from day one.
PTO plan of up to 200 hours annually, aligned with applicable state leave regulations, with flexibility to adjust PTO allocation at the start of each calendar year.
Voluntary medical plan options, some with a Health Savings Account (HSA).
Vision and dental benefits.
Life and AD&D benefits.
Short- and long-term disability coverage.
Hospital indemnity, accident, and critical illness insurance.
Optional identity theft and legal protection services.
Employee referral bonus eligibility up to $10,000.
Mobility among Wyetech-supported contracts and work locations.
Team-building events, including monthly lunches, a summer company picnic, and an annual holiday party.
Two complimentary branded clothing orders annually.