Software Cyber ISSE (GitLab & RMF Focus)

Parsons Corporation•Aberdeen, MD

7d•$103,500 - $181,100

About The Position

Parsons is seeking a highly skilled and motivated Software Cyber ISSE (Information Systems Security Engineer) to join our dynamic team! In this role, you will play a key part in integrating cybersecurity best practices throughout the software development lifecycle, supporting compliance activities, and ensuring the security posture of critical systems for our Department of Defense (DoD) and Federal clients.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent experience).
5+ years of experience in cybersecurity engineering, with a focus on software systems.
Demonstrated expertise in GitLab, including CI/CD pipeline security and DevSecOps integration.
In-depth knowledge and hands-on experience with the NIST Risk Management Framework (RMF).
Experience developing and maintaining RMF documentation (SSP, SAR, POA&M, etc.).
Strong understanding of secure software development lifecycle (SDLC) practices.
Familiarity with DoD/Federal cybersecurity requirements (e.g., NIST SP 800-53, CNSSI 1253).
Excellent communication and technical writing skills.
Must be a US citizen.

Nice To Haves

Relevant cybersecurity certifications (e.g., CISSP, CAP, CEH, Security+).
Experience with container security, cloud security, or infrastructure as code (IaC).
Familiarity with additional DevSecOps tools (e.g., Jenkins, Docker, Kubernetes).
Experience supporting Authorization to Operate (ATO) processes.
Active SECRET Clearance (or higher preferred).

Responsibilities

Serve as the Information Systems Security Engineer (ISSE) for software development projects, ensuring security is embedded at every stage.
Integrate cybersecurity requirements into software design, development, and deployment processes.
Utilize GitLab for secure code management, CI/CD pipelines, and DevSecOps practices.
Develop and maintain Risk Management Framework (RMF) documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms).
Conduct security risk assessments and vulnerability analyses to identify and mitigate potential threats.
Collaborate with cross-functional teams to ensure compliance with DoD and Federal cybersecurity policies and standards.
Support security control implementation, testing, and continuous monitoring activities.
Provide technical guidance on secure coding, code reviews, and vulnerability remediation.