Information Systems Security Engineer; COMSEC at Northstrat Remote

Information Systems Security Engineer (COMSEC) | Remote

Northstrat is seeking an Information Systems Security Engineer to join our team. The ideal candidate will have experience in the following areas: secure software engineering practices in support of Department of Defense (DoD) or Intelligence Community (IC) customers, application of NIST Special Publications 800 security controls and the Risk Management Framework (RMF) process, and system vulnerability scanning.

• Planning and managing the system application of NIST Special Publications 800 series security controls.
• Perform system vulnerability scanning, documenting results, and working with the development team to address security findings.
• Generation of comprehensive system security documentation and artifacts, to include a Plan of Action and Milestones (POA&M), for obtaining and maintaining Interim Authorization to Test (IATT), Authority to Connect (ATC) and Authorization to Operate (ATO).
• Work collaboratively with team members, Information Assurance, Information Security Engineering, and other Subject Matter Experts to resolve security issues.
• Maintain thorough documentation of all activities and communications through ticketing systems, operational briefs, and status reports.
• Distribution and transfer (KMI/OTAT)
• Experience with key dispositions to include SKMP (symmetric key management plan)

• Knowledge of, and practical experience with the NIST Special Publications 800 Series and the Risk Management Framework (RMF) process.
• Familiar with secure software engineering practices in support of Department of Defense (DoD) or Intelligence Community (IC) customers.
• Experience with Authorization and Accreditation (A&A) process using RMF for classified systems obtaining and maintaining Interim Authorization to Test (IATT), Authority to Connect (ATC) and Authorization to Operate (ATO).
• Experience with vulnerability scanning.
• Experience with security tools such as:
  Assured Compliance Assessment Solution (ACAS), and Security Technical Implementation Guide (STIGs).
• Familiar with information security principles and best practices.
• Excellent communication and collaboration skills.
• Ability to work independently and as part of a team.

• Familiar with tiered security environments (U, S, TS).
• Familiar with AWS security services.
• Familiar with AWS infrastructure services.
• Familiar with Agile development methodologies.

• Must have bachelor’s degree in a STEM related field and 6 years of relevant experience.
• CompTIA Security+ certification is required.
• Must be a U.S. citizen – absolutely no exceptions.
• An active Top‑Secret clearance is required with SCI or SCI eligibility.
• Strong COMSEC background – know the difference between USEAD keying material and firefly keying material.

Northstrat offers a comprehensive benefits package designed to support wellness, healthy living, retirement investment, and continued learning. Benefits include flexible hours, individual benefit accounts, profit sharing, and stock options. Employees also gain access to educational opportunities and can use benefits for reimbursement of work‑related training.

Northstrat is an Equal Opportunity Employer. We are committed to fostering an inclusive, diverse workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, disability, veteran status, or other legally protected status.