Information Systems Security Engineer

Description

Columbia Technology Partners is seeking an Information Systems Security Engineer 1 to support the design, development, and implementation of secure systems across complex computing and network environments. This role focuses on identifying security risks, ensuring compliance with established standards, and integrating security throughout the system lifecycle.

This position requires hands-on experience with the Risk Management Framework (RMF), system authorization processes, and continuous monitoring activities, including the use of industry-standard RMF and vulnerability management tools.

• Conduct technical security assessments to identify vulnerabilities, compliance gaps, and risks
• Define and validate system security requirements and contribute to secure system design
• Design, develop, and integrate security solutions across networks, systems, and enclave environments
• Collaborate with systems engineers and architects to incorporate security controls into system architectures
• Support risk identification, analysis, and mitigation throughout the system lifecycle
• Participate in RMF-based security planning, Assessment & Authorization (A&A), and system accreditation efforts
• Develop, maintain, and validate RMF artifacts, including security control traceability, boundary definitions, and authorization packages
• Perform security control assessments aligned to NIST SP 800-53 and NIST 800-37
• Execute continuous monitoring activities, including vulnerability remediation, compliance validation, and reporting
• Conduct STIG implementation, patch management, and technical validation activities
• Analyze scan results, perform false positive validation, and ensure timely remediation of findings
• Utilize RMF and security compliance tools (e.g., XACTA, LATTEART, BISCOTTI, WATCHCAT, STE) to manage authorization data and workflows
• Review and maintain system security documentation to ensure completeness, accuracy, and audit readiness
• Support incident handling, auditing, configuration control, and change management processes
• Work with customers and cross-functional teams to meet operational and security objectives

• Bachelor's degree in Computer Science, Information Assurance, or related field (4 additional years of experience may substitute)
• Minimum 7 years of experience as an ISSE or in a related role
• DoD 8570 IASAE Level II certification (or equivalent)
• Experience with the Risk Management Framework (RMF), including A&A processes, ATOs, and continuous monitoring
• Hands‑on experience with RMF tools, NIST 800-53/800-37, vulnerability scanning, STIG implementation, and security control validation

• U.S. Citizenship is required for all applicants. CTP is an equal opportunity employer and abides by applicable employment laws and regulations. All applicants and employees are subject to random drug testing in accordance with Executive Order 12564. Employment is contingent upon successful completion of a security background investigation and polygraph.
• Certification Requirements:
  • DOD 8570 IASAE Level II Certification

This position requires an active Security Clearance with appropriate Polygraph.

Founded in 2007, Columbia Technology Partners is a Woman-Owned, Service-Disabled Veteran Owned Small Business with a specialization in technology and management consulting committed to solving intricate and sensitive technology issues facing corporations and federal agencies. Since its inception, CTP has been instrumental in the technical design, engineering development, operational deployment, and support of key systems. With a proven track record in information security, project management, systems/network engineering, security risk management, vulnerability assessments, and mobile security implementation;

our employees have the experience, expertise, and innovative thinking our customers need for results that exceed expectations. CTP staff have worked closely with both government engineers and management to gather mission requirements, develop the architecture to deliver the needed functionality and assess tools available to meet or exceed the needs of the mission.

At Columbia…