Information System Security Engineer (ISSE)

Description

The company supports US federal government clients across defense, national security, public safety, civilian, and military health organizations, with about 13,000 people working toward the same mission.

The team is looking for an Information System Security Engineer (ISSE) to design, build, and run the security architecture and controls for cloud-based client systems on the program.

The role also covers engineering input for RMF and JSIG authorization work.

Responsibilities

• Design, implement, and check security controls for cloud systems, covering identity and access management, encryption, and network security.
• Engineer and administer security tools, including Splunk SIEM, Nessus or ACAS vulnerability scanning, and STIG compliance tooling.
• Write security-as-code automation that deploys and configures these tools using Ansible, Terraform, PowerShell, Bash, or Python.
• Provide technical content for RMF authorization documents such as the SSP, SCTM, POA&Ms, and risk assessment reports.
• Build detections, tune alerts, and improve telemetry to strengthen incident response.
• Review new and existing systems for compliance with IA directives, including how data is protected across classification levels.

Requirements

• At least 3 years implementing NIST 800-53 controls and the Risk Management Framework (RMF).
• At least 1 year of hands-on work administering security tooling such as Splunk, Nessus or ACAS, or security automation in Ansible, Terraform, PowerShell, Bash, or Python.
• At least 2 years working with virtualization or cloud platforms on AWS or Azure.
• DoD 8570 IASAE Level II certification (for example CISSP or CASP+), or the DoD 8140 equivalent.

Conditions

Bonus: a Bachelor's or Associate degree in Computer Science, Cybersecurity, or a related technical field, or 4+ years of relevant job or military experience in place of a degree.

Bonus: AWS or Azure technical certifications, or Splunk certifications such as Splunk Certified Architect or Splunk Enterprise Security Certified Admin.

Bonus: experience on a security incident response team in a NOC or SOC.

Bonus: familiarity with container security, including Docker, Kubernetes, and ECS, EKS, or AKS.

Bonus: knowledge of JSIG or ICD 503 compliance.

Bonus: experience in a DevSecOps project environment.

Bonus: familiarity with National Security systems and air-gapped environments.

An active TS clearance is required, and SCI is preferred.

The base pay range of $103,200 to $196,400 USD applies in California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia.

Pay varies by location, role, skill set, and experience level.

Applications are accepted on an ongoing basis with no fixed deadline.

The company gives equal opportunity to all applicants regardless of background.

Benefits

• A wide range of benefits is offered, with details available on the company's benefits page.
• Hands-on experience, certifications, and industry training to help you grow.