ISSE (Hybrid) -

Wyetech•San Antonio, TX

2d•$52 - $119•Hybrid

About The Position

Wyetech is seeking an experienced Information Systems Security Engineer to support the design, development, implementation, and accreditation of secure information systems and network architectures in mission-critical Department of Defense environments. The position performs system and network security engineering across multiple enclaves with differing classification and data-protection requirements. It requires knowledge of distributed architectures, cloud-based systems, and Big Data applications, along with experience implementing DoD Risk Management Framework processes and information assurance requirements. The engineer works with government stakeholders, cybersecurity professionals, system engineers, and software development teams to assess security risks, implement safeguards, maintain authorization documentation, and ensure compliance with federal and DoD security policies. The role is hybrid, with approximately one to three onsite days per week in San Antonio, Texas; onsite schedules may change to meet mission and operational requirements. An active TS/SCI clearance with Full Scope Polygraph, U.S. citizenship, and a qualifying DoD IAT Level II certification are required. Candidates must meet one of these education and experience combinations: a related technical bachelor's degree and nine years of relevant experience; a related technical master's degree and seven years of relevant experience; or a high school diploma or equivalent and thirteen years of relevant experience. RMF experience is preferred; DIACAP experience is also applicable. CISSP-ISSEP is highly desired. The position offers an hourly pay range of $51.84–$118.91. Wyetech states that compensation depends on factors including contract rates, education, experience, skills, certifications, and location. Benefits include a company SEP IRA contribution, PTO, optional benefits, referral bonus eligibility, contract mobility, company events, and annual branded clothing orders.

Requirements

Active TS/SCI security clearance with Full Scope Polygraph; clearance must be maintained throughout employment.
U.S. citizenship.
A qualifying DoD 8570 IAT Level II certification, such as CompTIA Security+, SSCP, CCNA Security, or GSEC, aligned with applicable contract and DoD requirements.
One of the following education and experience combinations: related technical bachelor's degree plus nine years of relevant experience; related technical master's degree plus seven years; or high school diploma or equivalent plus thirteen years.
Experience performing information systems security engineering for large, complex, multi-tiered programs and enterprise environments.
Experience designing and evaluating secure system and network architectures across enclaves with different classification and data-protection requirements.
Experience with DoD system accreditation and authorization processes, including DIACAP or RMF.
Understanding of federal and DoD cybersecurity policies, security authorization requirements, and information assurance principles.
Experience creating, reviewing, maintaining, and validating system authorization documentation for completeness, accuracy, and regulatory compliance.
Experience assessing operational and cybersecurity risks associated with open-source, GOTS, and COTS software components.
Experience using vulnerability management platforms, automated security scanning tools, and system accreditation record systems.
Working knowledge of TCP/IP protocols and services, computer architectures, network topologies, and secure network design principles.
Experience implementing and evaluating DISA STIGs and SRGs.
Experience identifying vulnerabilities, planning mitigation, tracking remediation, validating compliance, and analyzing automated security scan results.
Knowledge of distributed architectures, cloud computing environments, and security considerations for Big Data applications.
Ability to conduct security planning, risk assessments, risk analysis, and risk management activities.
Experience recommending system-level security solutions and collaborating with engineering and development teams to meet security requirements.
Ability to independently evaluate complex technical issues, establish defensible security processes, and communicate findings to technical and nontechnical stakeholders.
Strong interpersonal, analytical, technical documentation, and problem-solving skills.
Ability to work independently and collaboratively in multidisciplinary engineering and cybersecurity teams.
Availability for approximately one to three onsite days per week in San Antonio, with flexibility for mission-driven schedule changes.
Ability to maintain applicable certification and program access requirements throughout employment.

Nice To Haves

RMF experience is preferred.
CISSP-ISSEP certification is highly desired.
Experience implementing and maintaining RMF authorization packages for complex DoD information systems.
Experience supporting cloud-based architectures, distributed computing environments, and Big Data platforms.
Experience with security engineering across multiple classification domains and interconnected enclaves.
Experience supporting secure system integration, enterprise cybersecurity architecture, and authorization activities involving external systems.
Familiarity with evolving DoD cybersecurity compliance requirements, security engineering methodologies, and continuous monitoring practices.

Responsibilities

Design, assess, and implement secure system and network architectures across enclaves with varying classification and data-protection requirements.
Create, review, edit, maintain, and validate security authorization documentation and supporting compliance materials.
Implement and support DoD RMF accreditation and authorization processes throughout the system development and operational lifecycle.
Develop security documentation, risk assessments, compliance artifacts, and authorization materials.
Evaluate operational risks of integrating open-source, COTS, and GOTS software components into mission-critical systems.
Use vulnerability management systems, automated security scanning tools, and accreditation tracking platforms to assess security posture.
Review scan results, identify security deficiencies, recommend corrective actions, and track remediation.
Apply DISA STIGs and SRGs to assess system configurations, evaluate compliance, and support vulnerability mitigation.
Provide security planning, assessment, risk analysis, and risk management support for enterprise systems and applications.
Recommend system-level security solutions to address technical requirements, mitigate vulnerabilities, and improve security posture.
Collaborate with developers, systems engineers, network engineers, cybersecurity personnel, government stakeholders, and other teams to incorporate security requirements and resolve security issues.
Support the Government in evaluating, establishing, and enforcing trusted relationships among interconnected systems and external architectures.
Apply information assurance policies, procedures, and technical controls to secure networking, computing, and enclave environments.
Evaluate network protocols, system architectures, communication interfaces, and infrastructure components for security risks.
Support security engineering for distributed architectures, cloud-based systems, and Big Data applications.
Facilitate technical information exchanges, requirements-gathering sessions, engineering reviews, and cybersecurity discussions.
Follow established security engineering and compliance processes, and develop defensible procedures when formal processes are not prescribed.
Support continuous monitoring, security control assessments, compliance reviews, and ongoing authorization maintenance.
Prepare technical findings, risk assessments, recommendations, and security documentation for government and program leadership.
Perform additional information systems security engineering responsibilities as needed to support program objectives.

Benefits

Company automatically contributes 20% of each employee's gross compensation to a SEP IRA, with no employee matching requirement; contributions are fully vested from day one.
PTO plan of up to 200 hours annually, with flexibility to adjust PTO allocation at the start of each calendar year.
Optional medical plan choices, some with a Health Savings Account.
Vision and dental benefits.
Life and AD&D benefits.
Short- and long-term disability benefits.
Hospital indemnity, accident, and critical illness insurance options.
Optional identity theft and legal protection services.
Employee referral bonus eligibility up to $10,000.
Mobility among Wyetech-supported contracts.
Team-building events, including monthly lunches, a summer company picnic, and an annual holiday party.
Two complimentary branded clothing orders annually.