Information System Security Engineer

Overview

Cyber Defense Technologies (CDT) is seeking a proactive Information Systems Security Engineer (ISSE) to support Risk Management Framework (RMF) compliance, system hardening, and security engineering across a diverse portfolio of systems. This role requires independent ownership of complex security challenges— from vulnerability assessment and remediation through continuous monitoring—while ensuring alignment with DoW and USSOCOM security policies.

An active Secret clearance is required, TS/SCI preferred. All candidates must be U.S. Citizens. Applicants who do not meet these requirements will not be considered.

• Perform security design, configuration, hardening, testing, and monitoring of advanced information systems independently or as part of a team.
• Conduct vulnerability testing and apply current compliance standards and technical controls across Windows, Linux, Android, iOS, and related platforms.
• Support security architecture development; enforce trusted relationships with external systems; assess and mitigate security threats/risks throughout the program lifecycle.
• Assist vendors and system developers in implementing DoW/USSOCOM security functionality and enterprise solutions.
• Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities.
• Review Assessment & Authorization (A&A;) documentation for completeness and compliance.
• Support rapid Fielding and Deployment Release processes by ensuring RMF and Authorization to Operate (ATO) requirements are met.
• Create and maintain IA policy documentation and RMF artifacts, including System Security Plans (SSP), Security Assessment Reports, Risk Assessments, POA&Ms, Control Implementation/Validation documents, Ports/Protocols/Services matrices, network/architecture diagrams, and accreditation boundaries.
• Execute cross-platform patch management and system imaging.
• Map NIST 800-53 controls and DISA CCIs to system capabilities in support of ATO maintenance and renewals.
• Engage customer technical points of contact as needed during architecture and implementation activities.

• Experience with RMF process and requirements (NIST 800-53)
• Experience with virtualized and standalone environments (VMware)
• Experience with patch management solutions
• Experience with standard forensic practices, imaging software, tools, and techniques
• Experience with Security Technical Implementation Guide (STIG) experience
• Experience with Vulnerability Management (Nessus, Nex Pose, OpenVAS, etc)
• ELINT, Radio Frequency, Electronic Warfare, and/or SIGINT experience a plus
• Translating technical customer requirements into business process and tasking
• Technical consulting both buyer and end user customer personnel in a complex environment
• System Administration experience with Linux and Windows
• Experience with administration and forensic practices with mobile platforms is a plus

• Bachelor’s degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related technical field; or work relevant work experience equivalent.
• Minimum 4 years of information security-related experience in areas such as security operations, vulnerability management, security testing, system patching, log analysis, intrusion detection, or security device administration.
• Knowledge of RMF, Windows/Linux operating systems, STIGs, ACAS, HBSS, and/or related technologies.
• Demonstrated ability to work independently, analyze root causes, and drive solutions from identification through resolution.
• U.S. Citizenship and active Secret clearance (or higher), clearable to TS/SCI.

• Active DoD 8570 IAT Level II (or higher) certification preferred at time of hire (e.g., Security+ CE, CASP+, CISSP).
• Hands-on experience with vulnerability assessment tools (ACAS, Nessus, SCAP), VMware, image deployment/orchestration, and multi-platform hardening.
• Technology-specific certifications (Cisco, VMware, Microsoft, etc.) relevant to the environment.
• Experience supporting rapid ATO processes and continuous monitoring in DoD/IC environments.

CON…