Information Systems Security Engineer; ISSE

Information Systems Security Engineer (ISSE)

K ’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.

• Innovative Projects: K ’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.
• Collaborative Environment:
  Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.
• Impactful Work:
  Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of Joint and multi‑domain operations.

• Integrate cybersecurity requirements into system architecture, design, and engineering processes from concept through deployment.
• Develop and maintain system security artifacts including Security Plans, Security Controls Traceability matrices, architectural diagrams, and engineering documentation.
• Perform security engineering analyses, including threat modeling, vulnerability assessments, and security impact analyses of proposed changes.
• Select, tailor, and implement security controls aligned with NIST SP 800‑53, CNSSI 1253, the Joint Special Access Program (SAP) Implementation Guide, and/or applicable organizational frameworks.
• Communicate risk analysis associated with engineered solutions including mitigation strategies, residual risk and risk‑benefit recommendations.
• Perform requirements analysis, design, and integration for complex software applications and collaboration infrastructures.
• Participate in the change management process, including submitting and reviewing Change Requests (CRs) and assisting in the assessment of security impact of proposed changes.
• Create and maintain information system security documentation, Standard Operating Procedures (SOP), and provide guidance on active Plans of Action and Milestones (POA&M).
• Conduct periodic and continuous monitoring of the system, procedures, and documentation to ensure compliance with the authorization.
• Collaborate with ISSOs, system administrators, and development teams to remediate vulnerabilities and ensure secure system configurations.
• Communicate with multiple systems owners to address security‑relevant design and integration requirements for hybrid systems.
• Evaluate cloud supporting technologies in areas of encryption, identity and access control, boundary protection, and logging/monitoring.
• Support incident response and forensic analysis as needed, ensuring proper coordination with organizational cybersecurity teams.
• Support development and execution of governance frameworks for managing and authorizing national security systems.

• Location:
  
  On‑site
• Travel Requirements:
  Minimal 0‑25%
• Working Hours:
  
  Standard

• Must have experience working with Special Access Programs (SAPs).
• Strong proficiency in Cloud architecture and associated security elements.
• Must possess excellent analytical skills and be capable of quantifying risk to enterprise systems and level of compliance with security policy.
• 12+ years’ technical experience in cybersecurity, information technology, or systems engineering.
• Excellent communication skills (verbal and written) required.
• Master’s Degree in engineering, computer science, cybersecurity, networking, or programming.
• Current/active Top Secret/SCI;
  Current or recent DoD SAP access.
• Subject to a Counterintelligence (CI) polygraph.

• Secure systems engineering practices, including threat modeling, security architecture design, and/or system hardening.
• Software Development in Java, Python, Ruby and/or C++.
• Linux Expertise.
• Dynamic & Static Application Security Scanning (e.g., OPSWAT, OWASP ZAP, Burp Suite, Fortify).
• Experience with vulnerability management tools (e.g., Tenable, Defender), SIEM technologies, and secure configuration baseline.
• Infrastructure Security Scanning, Vulnerability Scanning (NMAP, Azure Defender, AWS Inspector,…