Information System Security Engineer (ISSE)

Description

The company is hiring a senior cybersecurity engineer for a team that builds and runs a set of secure, air-gapped development enclaves.

The role covers continuous exposure management, RMF lifecycle work, and Authorization to Operate (ATO) support.

You will help your team and the customer with technical evaluations, security control development and implementation, and full ATO management.

The role requires TS/SCI eligibility and is based in the Omaha, Nebraska area, with full-time on-site work at Offutt AFB.

Responsibilities

• Design, test, and implement secure operating systems and networks, including security monitoring, tuning and management of security systems and applications, incident response, digital forensics, loss prevention, and eDiscovery.
• Assess risk and vulnerabilities at the network, system, and application levels.
• Use AI-assisted RMF tools to ingest system documentation and post-deployment playbooks and find compliance gaps faster, speeding up the ATO process.
• Keep system authorization current by supporting continuous exposure management and ATO workflows.
• Work with system administrators and engineers to make sure security controls are implemented correctly.
• Build and roll out security controls, define operational risk mitigations, and help with security awareness programs.
• Handle security issues across architectures, firewalls, electronic data traffic, and network access.
• Analyze whether established security requirements hold, and recommend additional requirements and safeguards.
• Support the formal Security Test and Evaluation (ST&E) each government accrediting authority requires: prepare before testing, take part in tests, analyze results, and write the required reports.
• Review each system's audits on a regular schedule and track corrective actions until all are closed.
• Help develop, maintain, and report cyber metrics.
• Brief senior staff.
• Other duties may be assigned as needed.

Requirements

• 7+ years of relevant cybersecurity experience.
• 7+ years validating security controls with scanning tools, configuration reviews, and manual testing.
• 7+ years using the Risk Management Framework to obtain an Authority to Operate.
• Skill in drafting and auditing System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms) that explain risk clearly to non-technical readers.
• Ability to bridge developers, who hold the data, and cybersecurity leadership, who need it.
• Experience turning technical configurations into audit-ready evidence for GRC tools such as eMASS or ServiceNow.
• Hands-on experience with eGRC tools such as eMASS, XACTA, RSA Archer, and similar.
• Ability to explain ideas clearly to executives.
• Ability to apply past experience to new situations, especially in client interactions.
• Ability to pick up new knowledge and information quickly during client interactions.
• IAT II certification is required.
• A B.A. or B.S. in Information Security, Computer Science, or a related field.
• US citizenship and a Top Secret clearance with SCI eligibility.

Conditions

On-site in Omaha, Nebraska, full time.

Estimated salary range of $130,000.00 to $155,000.00, depending on experience and technical skill.

Direct, full-time W2 employment only. No third-party staffing agencies, C2C, or 1099 independent contractors.

Before hire, you must verify your identity, confirm US citizenship, and complete employment eligibility verification.

The company is an equal opportunity employer and welcomes applicants from all protected groups.