Senior Information Systems Security Engineer (ISSE) – Hybrid

Wyetech•Columbia, MD

4d•Hybrid

About The Position

Wyetech is seeking a Senior Information Systems Security Engineer (ISSE) to support the design, development, implementation, and accreditation of secure information systems supporting Department of Defense missions. The role assesses and strengthens security across systems and networks, including multiple enclaves with differing data-protection and classification requirements, distributed architectures, and cloud-based systems supporting big data applications. The ISSE collaborates with government stakeholders, system architects, developers, and engineering teams to implement security controls and manage system authorization activities. The ISSE performs or reviews technical security assessments to identify vulnerabilities and noncompliance with information assurance standards and regulations, validates security requirements, and establishes secure system designs. The position integrates information assurance into operational systems, supports trusted relationships between external systems and architectures, and assesses and mitigates security threats and risks throughout the program lifecycle. It also contributes to security planning, risk analysis, certification, continuous monitoring, and security awareness activities; reviews authorization documentation; and recommends mitigations and security solutions. This position follows a hybrid schedule, averaging one to two days per week onsite in Columbia, Maryland, with flexibility to accommodate mission requirements. U.S. citizenship and an active U.S. Government Secret clearance are required. Candidates must meet one of the stated education-and-experience combinations and applicable DoD 8140 workforce requirements, including an IAT Level II certification.

Requirements

Meet one of the following education and experience combinations: a bachelor's degree in Computer Science, Information Assurance, Information Security, Systems Engineering, or a related discipline and at least 9 years of relevant ISSE experience supporting large, multi-tiered programs; a master's degree in a related technical discipline and at least 7 years of relevant experience; or a high school diploma/GED and at least 13 years of relevant experience.
Experience implementing DoD system accreditation processes, including DIACAP or RMF; RMF experience is preferred.
Experience creating, reviewing, and maintaining system authorization documentation for completeness, accuracy, and compliance with federal and DoD policies.
Strong understanding of DoD RMF processes and system accreditation requirements.
Experience assessing risks associated with integrated open-source, GOTS, and COTS software components.
Experience with vulnerability management systems, automated security scanning tools, and system accreditation systems of record.
Experience interpreting and implementing DISA STIGs and SRGs.
Experience in security planning, vulnerability assessment, risk analysis, risk management, and mitigation.
Working knowledge of TCP/IP protocols and services, computer architectures, and network topologies.
Understanding of NIST SP 800-53 controls, control inheritance, and security authorization artifact generation.
Hands-on experience navigating authorization workflows, uploading security artifacts, and managing POA&Ms in eMASS, Xacta, or equivalent RMF systems of record.
Experience designing and implementing secure networking, computing, and enclave environments, including systems with differing data-protection or classification requirements.
Understanding of distributed architectures and cloud-based systems supporting big data applications.
Knowledge of information assurance policies, procedures, and cybersecurity workforce requirements.
Must meet applicable DoD 8140 cybersecurity workforce qualification requirements and possess an IAT Level II certification specified for the position; examples include SSCP, Security+ CE, CCNA Security, or GSEC, subject to applicable qualification requirements.
Strong analytical, technical documentation, communication, and problem-solving skills; ability to work independently and collaboratively with technical teams and government stakeholders.
Must be willing to work a hybrid schedule averaging one to two days per week onsite in Columbia, Maryland, with flexibility for schedule changes.
U.S. citizenship and an active U.S. Government Secret security clearance are required.

Nice To Haves

CISSP-ISSEP certification is highly desired.
Experience with Bash scripting.
Experience with Kubernetes container orchestration.
Experience creating technical diagrams using Microsoft Visio or draw.io.
Experience with Red Hat Enterprise Linux (RHEL).
Experience with Amazon Web Services (AWS) cloud environments.

Responsibilities

Perform or review technical security assessments of computing environments to identify vulnerabilities and noncompliance with information assurance standards and regulations.
Recommend mitigation strategies for system vulnerabilities and security deficiencies.
Validate and verify system security requirements and establish secure system designs based on security requirements and operational objectives.
Design, develop, implement, and integrate information assurance and security systems and components for networking, computing, and enclave environments.
Support systems with multiple enclaves and differing data-protection or classification requirements.
Incorporate information assurance requirements and security controls into systems deployed to operational environments.
Assist architects and developers in identifying and implementing security functionality and ensure consistent application of Agency security policies and enterprise solutions.
Support development and implementation of secure system architectures and trusted relationships among external systems and architectures.
Assess and mitigate system security threats and risks throughout the program lifecycle.
Develop, review, and maintain system authorization documentation in accordance with federal and DoD policies.
Implement and support DoD RMF processes, including security control assessment, authorization, and continuous monitoring.
Apply NIST SP 800-53 controls, control inheritance concepts, and security authorization artifact requirements.
Interpret and implement DISA STIGs and SRGs to support system hardening and security compliance.
Use vulnerability management systems and automated security scanning tools to identify weaknesses and assess compliance; review results and recommend remediation.
Manage security authorization workflows, documentation, and POA&Ms in eMASS, Xacta, or equivalent RMF systems of record.
Assess operational risks associated with integrated open-source, GOTS, and COTS software components.
Provide security planning, assessment, risk analysis, and risk management support for information systems and network operations.
Recommend system-level security solutions and guide development teams in meeting security posture requirements.
Establish and execute defensible security processes when established procedures are unavailable.
Collaborate with government stakeholders and technical teams to implement appropriate security measures.
Review certification and accreditation documentation and provide feedback on completeness, accuracy, and compliance.

Benefits

Simplified Employee Pension (SEP) IRA contribution of 20% of gross compensation, with no employee matching requirement; contributions are fully vested from day one.
PTO plan of up to 200 hours annually, with flexibility to adjust PTO allocation at the start of each calendar year.
Voluntary medical plan options, some with a Health Savings Account (HSA).
Vision and dental benefits.
Life and AD&D benefits.
Short- and long-term disability benefits.
Hospital indemnity, accident, and critical illness insurance.
Optional identity theft and legal protection services.
Employee referral bonus eligibility up to $10,000.
Mobility among Wyetech-supported contracts and locations.
Team-building events, including monthly lunches, a summer company picnic, and an annual holiday party.
Two complimentary branded clothing orders annually.