Information Systems Security Engineer (ISSE)

• Integrate cybersecurity requirements into system architecture, engineering designs, interface specifications, and technical documentation throughout the lifecycle.
• Engineer, implement, and validate security controls in accordance with NIST RMF, NIST SP 800-53, CNSSI 1253, and DoD cybersecurity guidance.
• Conduct architecture reviews, vulnerability assessments, threat analysis, risk assessments, attack surface analysis, and mitigation planning.
• Participate in architecture reviews, design reviews, technical interchange meetings, and configuration control boards to ensure cybersecurity is built in from the start.
• Develop and maintain technical cybersecurity documentation such as SSPs, control implementation statements, security and network diagrams, interface documents, and engineering analyses.
• Support RMF activities including SAPs, SARs, POA&Ms, continuous monitoring documentation, and other authorization artifacts.
• Identify cybersecurity gaps and architectural risks; recommend practical engineering solutions to strengthen security posture.
• Collaborate with engineering teams to establish and maintain secure configuration baselines.
• Evaluate system changes, technology insertions, and architecture modifications for cybersecurity impacts and accreditation implications.
• Support vulnerability management by analyzing scan results, prioritizing findings, planning remediation, and validating corrective actions.
• Participate in integration, testing, verification, validation, and accreditation activities to ensure security controls perform as intended.
• Support continuous monitoring by assessing control effectiveness and recommending improvements.
• Ensure secure integration of COTS, GOTS, open-source, cloud-based, and custom-developed technologies.
• Provide guidance on secure design, defense-in-depth, Zero Trust principles, and cybersecurity best practices.
• Prepare technical reports, engineering recommendations, risk assessments, and executive briefings.
• Clearan ce Required • Active Top Secret
• Experience Requirements • Minimum three (3) years of experience developing, implementing, and maintaining cybersecurity policies, including Assessment and Authorization (A&A) activities.
• Certification Requirements • Must hold a DoD 8570/8140 Level I certification in IAM, IAT, or IASAE.
• Government & Compliance
• DoD/IC Experience: Experience supporting DoD, Intelligence Community, or classified government systems.
• RMF Expertise: Demonstrated experience engineering NIST RMF controls and producing RMF artifacts.
• Security Architecture & Engineering
• Secure Systems Design: Strong understanding of secure systems engineering, defense-in-depth, Zero Trust architectures, and large-scale distributed systems.
• Core Technologies: Experience with operating systems, networking, virtualization, cloud, IAM, encryption, and cybersecurity technologies.

None flagged.