Job description

One of our clients has an immediate need for a INFORMATION SYSTEM SECURITY ENGINEER (ISSE) - Level 4 to work full-time on site at their client location in LORTON, VA . This position requires an active TOP SECRET with SCI level clearance. One of our clients is searching for a Senior Information System Security Engineer (ISSE) to join their dynamic team of experts in Lorton, VA. In this role, you will provide engineering, administration, and sustainment for a suite of cybersecurity tools — including Splunk, Nessus/ACAS, Trellix ePO, and STIG/SCAP — supporting the development and sustainment of secure enclaves at the edge that deliver enterprise services and cyber network defense capabilities across the DoD. You will perform technical security assessments to identify vulnerabilities and non-compliance with Information Assurance standards, and recommend mitigation strategies to the ISSM/ISSO. Candidates should bring strong technical depth across identity, endpoint, and vulnerability management tooling, along with a background supporting classified DoD environments. Key Responsibilities: • Design, implement, and maintain distributed Splunk Enterprise environments, including RBAC, dashboards, reports, and alert capabilities. • Administer Nessus Scanner/Manager and Security Center, developing custom scans, reports, and maintaining vulnerability plugins. • Manage Trellix ePO endpoint security, including custom policies, software deployments, and security content updates. • Design and implement security requirements for hybrid cloud environments to meet RMF requirements. • Engineer unique solutions to support ongoing Cyber Threat and Cyber Defensive Operations. • Automate threat assessment and reporting activities, and provide audit support. • Analyze and report system and organizational security posture trends to the ISSM/ISSO. • Assess access controls, configuration management processes, and security control effectiveness, reporting findings to the ISSM/ISSO. • Implement security measures to resolve vulnerabilities, mitigate risks, and recommend system security changes as needed. • Develop, maintain, and update technical documentation, including System Security Plans (SSPs), engineering diagrams, and implementation guides. • Support ISSM/ISSO cybersecurity and RMF activities required to achieve and maintain an Authority to Operate (ATO). • Monitor and investigate security breaches, and educate employees and clients on security procedures and programs. • Receive enterprise cyber tickets and resolve via automation when possible. Required Qualifications: • Bachelor's degree in Computer Science, Engineering, Finance, Business, or a related field AND 3+ years of leadership experience in a relevant area of business, OR equivalent experience. • 8+ years of demonstrated performance in related technology. • 5+ years of related experience in an SCI/SAP environment. • Security+ Certification. • Active TS/SCI security clearance. Advanced technical competency in: • ACAS/Nessus • Trellix/ePO • Active Directory Domain Services • Active Directory Federated Services • Active Directory Certificate Services • Windows Server Update Services • Splunk • STIG/SCAP • Azure Monitor / Log Analytics Preferred Qualifications: • 5+ years of leadership experience in a relevant area of business. • Technical certifications in Azure. • DoD IAT Level III Certification (CISSP or CASP). • Container security familiarity (Docker/Kubernetes/AKS/EKS). Requirements: • Must be within driving distance of Lorton, VA OR willing to relocate there (relocation packages available). • Must be willing to work onsite. • Strong written and verbal communication skills with excellent attention to detail and documentation accuracy. • Ability to work independently and collaboratively in a mission-focused environment. • Must be willing and able to travel up to 25%. • Must possess an active TS/ SCI clearance or above. • Please note that pursuant to a government contract, this specific position requires U.S. citizenship status.

Requirements

Must-haves

Design, implement, and maintain distributed Splunk Enterprise environments, including RBAC, dashboards, reports, and alert capabilities.
Administer Nessus Scanner/Manager and Security Center, developing custom scans, reports, and maintaining vulnerability plugins.
Manage Trellix ePO endpoint security, including custom policies, software deployments, and security content updates.
Design and implement security requirements for hybrid cloud environments to meet RMF requirements.
Engineer unique solutions to support ongoing Cyber Threat and Cyber Defensive Operations.
Automate threat assessment and reporting activities, and provide audit support.
Analyze and report system and organizational security posture trends to the ISSM/ISSO.
Assess access controls, configuration management processes, and security control effectiveness, reporting findings to the ISSM/ISSO.
Implement security measures to resolve vulnerabilities, mitigate risks, and recommend system security changes as needed.
Develop, maintain, and update technical documentation, including System Security Plans (SSPs), engineering diagrams, and implementation guides.
Support ISSM/ISSO cybersecurity and RMF activities required to achieve and maintain an Authority to Operate (ATO).
Monitor and investigate security breaches, and educate employees and clients on security procedures and programs.
Receive enterprise cyber tickets and resolve via automation when possible.
Bachelor's degree in Computer Science, Engineering, Finance, Business, or a related field AND 3+ years of leadership experience in a relevant area of business, OR equivalent experience.
8+ years of demonstrated performance in related technology.
5+ years of related experience in an SCI/SAP environment.
Security+ Certification.
Active TS/SCI security clearance.
Active Directory Domain Services
Active Directory Federated Services
Active Directory Certificate Services

Nice-to-haves

Technical certifications in Azure.
DoD IAT Level III Certification (CISSP or CASP).
Container security familiarity (Docker/Kubernetes/AKS/EKS).

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azuredockerkubernetes

Platform: catsone
Effort: medium