ISSE; Hybrid

Location: San Antonio, Texas
Work Arrangement: Hybrid (Approximately 1-3 Days Onsite Per Week)
Required Clearance: Active TS/SCI with Full Scope Polygraph

Wyetech is seeking an experienced Information Systems Security Engineer (ISSE) to support the design, development, implementation, and accreditation of secure information systems and network architectures supporting mission-critical Department of Defense (DoD) environments.

The ISSE will perform system and network security engineering across multiple enclaves, including environments with differing data protection and classification requirements. This position requires a comprehensive understanding of distributed architectures, cloud-based systems, and Big Data applications, as well as extensive experience implementing DoD Risk Management Framework (RMF) processes and information assurance requirements.

The successful candidate will collaborate with government stakeholders, cybersecurity professionals, system engineers, and software development teams to assess security risks, implement technical safeguards, maintain authorization documentation, and ensure compliance with federal and DoD security policies.

This position offers a hybrid work arrangement requiring approximately one to three days per week onsite in San Antonio, Texas. Candidates must be flexible to accommodate changes to onsite schedules based on mission and operational requirements.

• Active TS/SCI clearance with Full Scope Polygraph.

• Demonstrated experience performing information systems security engineering for large, complex, multi-tiered programs and enterprise environments.

• Experience designing and evaluating secure system and network architectures spanning multiple enclaves with differing classification and data protection requirements.

• Experience implementing DoD system accreditation and authorization processes, including DIACAP or RMF, with RMF experience preferred.

• Thorough understanding of federal and DoD cybersecurity policies, security authorization requirements, and information assurance principles.

• Experience creating, reviewing, maintaining, and validating system authorization documentation for completeness, accuracy, and regulatory compliance.

• Experience assessing operational and cybersecurity risks associated with integrated open-source, Government Off-the-Shelf (GOTS), and Commercial Off-the-Shelf (COTS) software components.

• Experience using vulnerability management platforms, automated security scanning tools, and system accreditation record systems.

• Working knowledge of TCP/IP protocols and services, computer architectures, network topologies, and secure network design principles.

• Experience implementing and evaluating Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).

• Experience with vulnerability identification, mitigation, remediation tracking, compliance validation, and analysis of automated security scan results.

• Knowledge of distributed system architectures, cloud-based computing environments, and security considerations associated with Big Data applications.

• Ability to perform security planning, risk assessments, risk analysis, and risk management activities.

• Experience recommending system-level security solutions and collaborating with engineering and development teams to meet established security requirements.

• Ability to independently evaluate complex technical issues, establish defensible security processes, and communicate findings to technical and nontechnical stakeholders.

• Strong interpersonal, analytical, technical documentation, and problem-solving skills.

• Ability to work independently and collaboratively within multidisciplinary engineering and cybersecurity teams.

• Ability to support a hybrid work schedule requiring approximately one to three days per week onsite in San Antonio, Texas.

Must meet DoD 8570 Information Assurance Technical (IAT) Level II certification requirements through an accepted certification, such as:

• CompTIA Security+

• Systems Security Certified Practitioner (SSCP)

• Cisco Certified Network Associate Security (CCNA Security)

• GIAC Security Essentials Certification (GSEC)

• Certified Information Systems Security Professional – Information Systems Security Engineering Professional (CISSP-ISSEP) certification is highly desired.

• Experience implementing and maintaining RMF…