Information Systems Security Engineer; ISSE

Grow your security engineering impact supporting RMF compliance through Assessment and Authorization (A&A) and Continuous Monitoring (Con Mon) activities across multi-level classification environments. This onsite role at Fort Belvoir, VA pairs critical security engineering work with access to cutting-edge technologies and a team that coordinates across cybersecurity, technical services, and customer stakeholders.

Compensation for this position is USD 107, per year. The role is Secret clearance required and requires U.S. citizenship
, with less than 10% travel
.

• Coordinate with other DSMS program teams to plan and create cybersecurity architecture and design documents, ensuring compliance with DoD and other organizational IA policies and guidance.
• Apply best practices for implementing security controls within an IS using software engineering methodologies
  , system/security engineering principles, secure design and architecture, and secure coding techniques.
• Develop cybersecurity architecture and design plans for communication and collaboration products, operating system platforms (servers, devices, and management products), applications, and security considerations for product implementation.
• Provide security engineering support for DSMS Network accreditation.
• Integrate cybersecurity expertise into lifecycle management, including planning architecture and design management, migration and deployment, and system testing and implementation.
• Research, develop, test, and document architectures and solutions for implementing new cybersecurity technologies to improve information collaboration and cybersecurity capabilities for the program and its user base.
• Develop and deliver criticality analysis for logic-bearing system components (hardware, firmware, and software) and the functions they implement, protect, or that may introduce vulnerabilities.
• Develop and maintain mission criticality analyses, vulnerability assessments, and risk assessments, including identification and countermeasure implementation for mission-critical functions, ensuring updated assumptions, rationale, results, supply chain risk information, and mitigations are available for Government review.
• Prepare and submit Interim Authorization to Test (IATT) and Authority to Operate (ATO) requests with Plans of Action and Milestones (PoAMs).
• Develop, maintain, and coordinate Body of Evidence (BoE) documentation for system assets.
• Collaborate with Technical Services and Security Services teams, plus customer agency stakeholders, to support compliance.
• Track lien remediation/resolution workflow and enter tracking tool updates; evaluate system change requests and assess both system and organizational risks tied to modifications.
• Execute Con Mon activities on established timelines, including BoE collection and tracking tool updates.
• Conduct recurring reviews of system state and security posture to ensure secure operation and that information systems security policies and procedures are followed.
• Recommend security control implementation and identify countermeasures or mitigating controls; respond to security information queries and report requests.
• Support security incident investigations and report findings as needed.
• Assist with communication, implementation, and enforcement of security policies and plans for data, applications, hardware, and telecommunications systems.
• Advise stakeholders on information assurance standards, dependencies, and emerging security technologies; use Enterprise Security Services tools such as Trellix and ACAS to track and remediate vulnerabilities and compliance deficiencies.

• Bachelor of Arts / Bachelor of Science
• 2+ years of related experience
• Secret security clearance level
• U.S. citizenship…