Information Systems Security Engineer

Planet Technologies•Washington, DC

1d•Onsite

About The Position

Planet Technologies is seeking an Information Systems Security Engineer (ISSE) to support public-sector projects. The ISSE integrates security engineering principles, requirements, and controls into information systems throughout the Systems Development Life Cycle (SDLC), from design and development through testing and sustainment. The position serves as the primary security engineering authority supporting system owners, ISSOs, and development teams in achieving and maintaining Authorization to Operate (ATO). The role supports security control selection, implementation, and assessment under NIST SP 800-53 and the Risk Management Framework (RMF), including development of System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms). It also engineers and validates technical security controls, supports security testing and vulnerability management, reviews configurations against DISA STIGs, assesses the security impact of proposed system changes, and prepares technical security documentation. The position requires working onsite five days a week in Washington, DC, and an active Top Secret clearance. Planet Technologies provides Microsoft consulting services to public-sector and commercial organizations, including federal agencies.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
Ideally, eight years of experience.
Proven experience in a Federal environment using the SDLC to integrate security engineering principles, requirements, and controls into information systems.
Experience serving as the primary security engineering authority supporting system owners, ISSOs, and development teams in achieving and maintaining ATO.
Experience participating in design reviews and recommending ways to mitigate risks.
Experience with NIST SP 800-53/RMF and developing SSPs, SARs, and POA&Ms for ATO packages.
Experience supporting vulnerability management and remediation prioritization and assessing the security impact of proposed system changes.
Ability to prepare effective technical security documentation.
Proven ability to advise ISSOs, program managers, and developers throughout the system lifecycle.
Ability and willingness to work onsite five days a week in Washington, DC.
Active Top Secret clearance.

Nice To Haves

Certifications including CISSP, ISSEP, Security+, CASP+/SecurityX, CISM, or CSSP.

Responsibilities

Integrate security engineering principles, requirements, and controls into information-system design, development, testing, and sustainment throughout the SDLC.
Serve as the primary security engineering authority supporting system owners, ISSOs, and development teams in achieving and maintaining ATO.
Identify and document information security requirements during system design and participate in design reviews, recommending engineering solutions to mitigate risks.
Support categorization, selection, implementation, and assessment of security controls under NIST SP 800-53/RMF.
Develop SSPs, SARs, and POA&Ms in support of ATO packages.
Engineer and validate technical security controls, including access control, auditing, encryption, and boundary protection.
Conduct or support security testing to verify control effectiveness.
Review system configurations against DISA STIGs and support vulnerability management and remediation prioritization.
Assess the security impact of proposed system changes.
Prepare technical security documentation, including architecture diagrams, control implementation statements, and interconnection security agreements.
Advise ISSOs, program managers, and developers throughout the system lifecycle.