Sr. Staff Information Systems Security Engineer (ISSE)

Description

Senior Staff Information Systems Security Engineer (ISSE) role, full time, in the Information Technology category.

You will be the main technical authority for the security and resilience of mission-critical systems.

You will build security into every stage of the Software Development Life Cycle and help design and sustain secure architectures for cloud and on-premise environments.

You will work with developers, systems engineers and government stakeholders on the Risk Management Framework lifecycle and keep the ATO current.

The team supports government customers' missions.

Responsibilities

• Run the full RMF process from start to finish, handling NIST 800-53 and 800-171 control sets and working with SCAs and DAOs to earn and keep the ATO.
• Push security by design through reviews of technical change requests and assessments of new technologies, and oversee security for AWS and Azure cloud platforms.
• Carry out system inspections and vulnerability assessments, manage POA&Ms, set patching priorities, and plan disaster recovery and contingency.
• Set up continuous monitoring to watch security posture, enforce cybersecurity policy, and explain complex technical risks to senior leaders.

Requirements

• Required: a bachelor's degree in computer science, information technology, cybersecurity, engineering or a related field.
• Required: 10+ years of progressive experience in cybersecurity, information assurance or a closely related area.
• Required: an active TS/SCI with Poly clearance.
• Required: DoD 8570 IAT Level II compliance, such as Security+, CCNA Security or CySA+.
• Required: deep hands-on experience with the full RMF lifecycle, including obtaining and maintaining an ATO under NIST 800-37.
• Required: expert knowledge of NIST 800-53 and 800-171 controls, including control inheritance and overlays.
• Required: ability to write cybersecurity policies, manage POA&Ms and build contingency and disaster recovery plans.
• Required: experience reviewing system changes for security impact and working with development teams to adopt new technology securely.
• Required: skill in security inspections, audits and vulnerability analysis to track patch effectiveness and system health.
• Required: working knowledge of security operations in AWS or Azure.
• Required: proven ability to brief complex technical risks to large groups and coordinate directly with SCAs and DAOs.
• Required: ability to handle high-pressure work and mission-critical deadlines alone or within a team.
• Desired: advanced understanding of the software development lifecycle.
• Desired: experience with governance, risk and compliance tools such as Xacta or SNOW.
• Desired: experience with common industry tools such as Nessus, Splunk or Anchore.

Conditions

Minimum clearance required to start: TS/SCI with Polygraph.

Full-time, regular position.

Travel of up to 10%, within the continental US.

Proposed salary range: $120,800 - $265,800.

Pay depends on factors including geographic location, Federal Government contract labor categories and wage rates, relevant experience, specific skills and competencies, education and certifications.

Benefits

• Flexible time off so you can take the time you need.
• Access to learning resources to support your career goals.
• Competitive compensation.
• Comprehensive benefits including healthcare, wellness, financial, retirement, family support, continuing education and time off.