Information Systems Security Engineer; ISSE

Overview

Job Title:

Information Systems Security Engineer (ISSE)

Job Category:
Information Technology

Time Type:
Full time

Minimum Clearance Required to Start: TS/SCI with Polygraph

Employee Type:
Regular

Percentage of

Travel Required:

Up to 10%

Type of Travel:
Local

• Security Architecture Support:
  Contribute to the design and documentation of secure system architectures that meet mission requirements and security standards.
• RMF Process Execution:
  Support Risk Management Framework (RMF) activities (Steps 1–6), assisting Information System Security Officers (ISSOs) in taking systems from initial categorization through Authorization to Operate (ATO).
• Security Documentation:
  Develop and maintain Assessment & Authorization (A&A) documentation, including Systems Security Plans (SSP), Security Control Traceability Matrix (SCTM), and Body of Evidence (BoE).
• Security Engineering:
  Design security architectures from requirements phase, defining system security requirements, and integrating capabilities including Zero Trust Architecture Software Defined Networking (SDN), macro/micro-segmentation, and software-defined perimeter controls to enable continuous verification and minimize network attack surfaces.
• Security Evaluation:
  Participate in formal and informal design reviews to identify potential security weaknesses, deficiencies, and/or vulnerabilities in the design, evaluating designs for security impacts before implementation.
• Compliance Implementation:
  Ensure hardware and software comply with Government Security Certification Officer (SCO) requirements and align with NIST SP 800-53, ICD 503, and CNSSI 1253 standards.
• Continuous Monitoring:
  Implement and maintain continuous monitoring (Con Mon) activities using automated tools to track system health and compliance status.
• Vulnerability Management:
  Perform risk assessments and security audits; use tools like Nessus (ACAS) and SCAP to identify, track, and remediate vulnerabilities.
• Incident Response Support:
  Assist with incident response activities and participate in on-call rotation for security incidents.
• Network Integration Support:
  Provide support for network mapping activities and system interdependencies to ensure secure data flow across the enterprise.

• Education:
  
  Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent experience.
• Experience:
  
  10+ years of related work experience with demonstrated ISSE/ISSO responsibilities, preferably within the Intelligence Community or DoD environment.
• Clearance:
  Current TS/SCI with Polygraph (Required).
• Certifications:
  
  Must meet DoD 8570/8140 IASAE Level II requirements (e.g., CISSP, CASP+, or CSSLP).
• Compliance Knowledge:
  Working knowledge of NIST 800-53 security controls and experience with RMF processes.
• Technical
  
  Skills:
  
  Understanding of network protocols (TCP/IP, DNS, HTTP) and security concepts including VPNs, IDS/IPS, and DMZ configurations.
• Tooling
  
  Experience:
  
  Experience with A&A tracking tools such as Xacta or eMASS.
• Communication:
  Strong analytical, problem-solving, and communication skills with the ability to document technical security findings clearly.

• Security
  
  Certifications:
  
  CISM, Security+, CCSP, or GSLC.
• Networking
  
  Certifications:
  
  CCNP Enterprise with the SD WAN, CCIE Security, JNCIS-ENT, JNCIP-ENT, or JNCIE-ENT
• Platform
  
  Experience:
  
  Exposure to major firewall platforms (e.g., Palo Alto, Cisco ASA, Fortinet).
• Tools
  
  Experience:
  
  Cisco Identity Services Engine (ISE), Juniper Contrail, Cisco Dev Net, Juniper Automation, or other networking orchestration tool.
• Scripting:
  Basic proficiency in Ansible, Python, Power Shell, or Bash for task automation.
• SIEM Experience

This position is contingent on funding and may not be filled…