ISSE (Hybrid) - 29506

Wyetech•Columbia, MD

2d•$52 - $119•Hybrid

About The Position

Wyetech is seeking an experienced Information Systems Security Engineer to provide cybersecurity engineering expertise for mission-critical Department of Defense environments. The role supports the design, development, implementation, assessment, authorization, and operational maintenance of secure information systems and network architectures across complex, multi-tiered systems and multiple security enclaves with differing classification levels and data protection requirements. The engineer works with government stakeholders, cybersecurity professionals, system engineers, and software development teams to implement security controls, assess risks, manage Risk Management Framework documentation, and maintain authorization packages. The work includes distributed architectures, cloud-based systems, Big Data applications, and federal and DoD cybersecurity compliance. This is a hybrid position based in Columbia, Maryland, requiring approximately one to two onsite days per week. Onsite schedules may change to meet mission and operational needs. Candidates must hold an active TS/SCI clearance with Full Scope Polygraph, be U.S. citizens, and maintain applicable clearance, certification, and program access requirements. Candidates must meet DoD 8140 IAT Level II qualification requirements. Candidates must meet one of these education and experience combinations: a bachelor's degree in a related technical discipline and nine years of relevant Information Systems Security Engineering experience; a master's degree in a related technical discipline and seven years of relevant experience; or a high school diploma or equivalent and thirteen years of relevant experience. Pay is listed at $51.84–$118.91 per hour; actual compensation varies based on factors including contract rates, education, experience, skills, certifications, and location. Wyetech describes its culture as focused on solving real-world problems for federal government customers. Benefits include a company SEP IRA contribution, paid time off, voluntary insurance and protection plans, referral bonus eligibility, mobility among supported contracts, team-building events, and two complimentary branded clothing orders annually.

Requirements

Active TS/SCI security clearance with Full Scope Polygraph; must be maintained.
U.S. citizenship.
Meet applicable DoD 8140 Information Assurance Technical (IAT) Level II qualification requirements.
Meet one of the stated education and experience combinations: related technical bachelor's degree plus nine years of relevant experience; related technical master's degree plus seven years; or high school diploma/equivalent plus thirteen years of relevant experience.
Experience supporting large, complex, multi-tiered programs and enterprise environments in Information Systems Security Engineering.
Experience designing, implementing, and evaluating secure system and network architectures across multiple enclaves with differing classification and data protection requirements.
Experience with DoD system accreditation and authorization processes, including DIACAP or RMF; RMF experience is preferred.
Knowledge of NIST SP 800-53, control inheritance, security control implementation and assessment, and authorization artifact generation.
Experience creating, reviewing, editing, and maintaining system authorization documentation under federal and DoD cybersecurity policies.
Hands-on experience with RMF workflows, authorization artifact uploads, and POA&M management in eMASS, Xacta, or equivalent systems.
Experience interpreting, applying, and validating DISA STIGs and SRGs.
Experience with vulnerability management systems, automated security scanning tools, and security compliance platforms.
Experience reviewing scan results, identifying deficiencies, documenting findings, developing mitigation strategies, and tracking remediation.
Experience evaluating risks associated with open-source, COTS, and GOTS software components.
Working knowledge of TCP/IP protocols and services, computer architectures, network topologies, and secure networking principles.
Understanding of distributed computing architectures, cloud systems, and security considerations for Big Data applications.
Experience with security planning, risk assessments, control evaluations, risk analysis, and risk management.
Ability to recommend system-level security solutions and work with engineering and development teams to achieve required security postures.
Strong knowledge of federal and DoD IA policies, procedures, and cybersecurity requirements.
Ability to independently assess complex technical issues, interpret security requirements, and develop defensible compliance processes when procedures are unavailable.
Strong analytical, technical documentation, communication, and interpersonal skills.
Ability to work independently and collaboratively in multidisciplinary engineering and cybersecurity teams.
Availability to work onsite approximately one to two days per week in Columbia, Maryland, with flexibility for mission-driven schedule changes.
Maintain applicable security clearance, certification, and program access requirements throughout employment.
Hourly pay range is $51.84–$118.91; compensation depends on factors including contract rates, education, experience, skills, certifications, and location.

Nice To Haves

CISSP-ISSEP certification is highly desired.
Experience developing Bash scripts for security administration, compliance validation, or operational automation.
Experience supporting containerized applications and infrastructure using Kubernetes.
Experience creating network and system architecture diagrams and technical documentation with Microsoft Visio or draw.io.
Experience administering, configuring, or securing Red Hat Enterprise Linux (RHEL).
Experience supporting and securing Amazon Web Services (AWS) infrastructure and services.
RMF experience is preferred.

Responsibilities

Design, evaluate, and support secure system and network architectures across enclaves with differing classification and data protection requirements.
Create, review, edit, and maintain security authorization documentation in accordance with federal and DoD cybersecurity policies.
Implement and support DoD RMF processes throughout system development, assessment, authorization, and operations.
Apply NIST SP 800-53 security controls, evaluate control inheritance, and develop compliance and authorization artifacts.
Use eMASS, Xacta, or equivalent systems to manage authorization workflows, upload documentation, track assessments, and maintain POA&Ms.
Interpret and apply DISA STIGs and SRGs to evaluate configurations and support compliance.
Conduct vulnerability assessments, analyze automated scan results, identify deficiencies, recommend remediation, and track corrective actions.
Assess cybersecurity and operational risks from integrating open-source, COTS, and GOTS components into mission systems.
Provide security planning, assessments, risk analysis, and risk management for enterprise information systems and applications.
Recommend technical system-level solutions to meet security requirements, mitigate vulnerabilities, and improve security posture.
Collaborate with developers, system engineers, infrastructure teams, and other stakeholders to incorporate security requirements into architectures and designs and resolve security issues.
Support the Government in establishing, evaluating, and enforcing trusted relationships among interconnected systems and external architectures.
Apply federal and DoD information assurance policies, procedures, and technical controls to secure networks, computing systems, and enclaves.
Evaluate TCP/IP communications, network architectures, system interfaces, and infrastructure for potential vulnerabilities.
Support cybersecurity engineering for distributed architectures, cloud systems, and Big Data applications.
Facilitate requirements gathering, technical exchanges, engineering reviews, and cybersecurity discussions with government and contractor stakeholders.
Follow established compliance processes and develop defensible procedures when formal guidance is unavailable.
Maintain authorization packages, compliance documentation, risk assessments, and technical artifacts; support continuous monitoring and ongoing authorization.
Prepare technical findings, risk assessments, mitigation recommendations, and compliance reports for government and program leadership.
Support improvements to security engineering processes, compliance workflows, documentation standards, and risk management practices.
Perform additional information systems security engineering duties as required to support mission objectives.

Benefits

Company automatically contributes 20% of each employee's gross compensation to a SEP IRA, with no employee matching required; contributions are fully vested from day one.
PTO plan of up to 200 hours annually, aligned with applicable state leave regulations; employees can adjust their PTO allocation at the start of each calendar year.
Voluntary medical plan options, some with a Health Savings Account (HSA).
Vision and dental benefits.
Life and AD&D benefits.
Short- and long-term disability benefits.
Hospital indemnity, accident, and critical illness insurance.
Optional identity theft and legal protection services.
Employee referral bonus eligibility up to $10,000.
Mobility among Wyetech-supported contracts and work locations.
Team-building events, including monthly lunches, a summer company picnic, and an annual holiday party.
Two complimentary branded clothing orders annually.