Information Systems Security Engineer

Information Systems Security Engineer
*
* The Opportunity:

** Security is most effective when it is part of system design from the beginning. As an Information Systems Security Engineer, you’ll help design, implement, and assess security controls that protect cloud-hosted information systems throughout their lifecycle.  In this role, you’ll work across cloud architecture, cybersecurity, Risk Management Framework, assessment and authorization, and operational readiness. You’ll help translate system requirements, architectures, data flows, and mission needs into practical security designs and controls that can be implemented, tested, documented, and sustained.  

You’ll collaborate with cloud, network, application, database, cybersecurity, and customer stakeholders to identify risks, strengthen security protections, and support informed authorization decisions. If you’re motivated by solving complex security challenges and helping teams deliver systems that are both capable and trusted, we invite you to join us.  
** What You’ll Work On:
*** Engineer, implement, and assess security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and assessment and authorization requirements.
* Translate security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs.
* Develop and maintain A&A artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages.
* Assess control implementation and effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure.
* Apply Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices.
* Perform security engineering across requirements analysis, architecture reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition.
* Support security assessments, authorization decisions, control validation, audit readiness, and continuous-monitoring activities.
* Communicate security risks, decisions, compliance status, remediation plans, and technical recommendations to program stakeholders.  Join us. The world can’t wait.
** You Have:*
* * 8+ years of experience in information systems security engineering, cloud security, or cybersecurity
* Experience engineering, implementing, and assessing security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and assessment and authorization processes
* Experience securing cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged-access capabilities
* Experience translating security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs
* Experience developing and maintaining A&A artifacts, including system security plans, control implementation statements, security assessment plans, POA&Ms, continuous-monitoring plans, and evidence packages
* Experience applying Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices
* Experience performing security engineering across the system lifecycle
* Ability to assess control effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure
* TS/SCI clearance; willingness to take a polygraph exam
* Bachelor’s degree
** Nice If You Have:*
* * Experience supporting…