ISSE - (Polygraph Required)

BTI360 Website•Herndon, VA

About The Position

As an ISSE at BTI360, you’ll play a mission-critical role ensuring our software systems meet security and compliance requirements. You will guide development teams through the A&A process from design through deployment. You’ll serve as a bridge between technical teams, security stakeholders, and accrediting authorities, helping all parties navigate requirements and deliver secure, mission-ready solutions.

Requirements

Active TS/SCI with Polygraph required at time of application
Proven experience supporting the Authorization & Accreditation (A&A) of [Insert classification level] systems in the Sponsor environment
Deep understanding of security controls, risk assessments, and documentation required for ATO submissions
Strong collaboration skills and the ability to partner with software engineers, architects, and mission stakeholders
Familiarity with cloud security architectures and controls (AWS preferred)
Excellent communication skills and comfort engaging with both technical and non-technical audiences

Nice To Haves

Experience accrediting systems at higher classification levels
Background in software engineering, DevSecOps, or IT systems engineering
Familiarity with ICD 503, RMF, and Sponsor-specific overlays
Familiarity with Sponsor-specific tooling including Nessus, Rapid7, WebInspect, AppDetect, and/or Nipper
Experience with containerized deployments, Infrastructure-as-Code (IaC), or automated compliance tooling
Security certifications such as CISSP, CAP, or AWS Security Specialty
Experience with continuous ATO (cATO) processes, FedRamp, or other relevant compliance pipelines

Responsibilities

Lead or support the Authorization & Accreditation (A&A) process for multiple software systems
Interpret and apply Sponsor-specific security requirements, policies, and control frameworks (based on NIST and Sponsor overlays)
Collaborate with engineering teams early in the development lifecycle to design systems that meet security, compliance, and mission needs
Prepare and maintain security documentation
Guide teams through the accreditation process, ensuring documentation and system posture align with Sponsor expectations
Interface directly with Information System Security Managers (ISSMs), Authorizing Officials (AOs), and security stakeholders
Provide security engineering input on architecture, data flows, boundary protections, and cloud configurations
Champion secure development practices and influence teams to make thoughtful tradeoffs between risk, performance, and agility
Track security posture and coordinate ongoing security monitoring, updates, and control implementation as systems evolve
Lead briefings/meetings with the Sponsor