Senior Information Systems Security Engineer

Overview:

GovCIO is currently hiring for a Senior Information Systems Security Engineer to support cybersecurity, compliance, and risk management activities supporting the U.S. Coast Guard's (USCG) Digital Workplace Product Line (DWPL). This role provides high-level engineering, technical execution, and security management to maintain federal security standards, manage vulnerabilities, and ensure enterprise workspace, mobile, and cloud environments achieve and retain authorization. This position will be located in Alexandria, VA, and will be a hybrid position.

As a Senior Information Systems Security Engineer, you will serve as a senior technical contributor for the cybersecurity posture, compliance framework, and risk management initiatives across the DWPL. Core responsibilities include:

• Support the program’s cyber‑risk reduction and vulnerability mitigation across enterprise hardware, cloud productivity suites, and virtual desktop environments.
• Performs continuous scanning, patching, and exposure reduction activities for end-user devices and the Digital Seabag mobile ecosystem.
• Maintains ATO compliance and strengthens security governance for enterprise workspace platforms and Manta Virtual Desktop (MVD) infrastructure.
• Expands security automation to improve resilience and consistency across modern USCG desktop systems.
• Collaborate with infrastructure and engineering teams to ensure vulnerability mitigation and scanning tools are embedded in modern digital transformation designs.
• Evaluate risk and document compliance baselines to strengthen overall system security governance within DoD secure cloud environments.
• Participate in technical reviews to continuously analyze and mitigate vulnerabilities across physical, mobile, and virtual workplace environments.
• Support automation implementation and continuous monitoring of security controls within cloud environments, including AI integration and low-code desktop automation frameworks.
• Work with product managers to plan security compliance and prioritize scanning, patching, and risk reduction tasks for workplace hardware and software lifecycles.
• Facilitate documentation required to maintain secure interconnections and preserve ATO compliance status for unified messaging and identity management platforms.
• Support Product Teams in preparing for cyber assessments to proactively validate vulnerability mitigation and security posture of digital workplace solutions.

High School with 9+ years (or commensurate experience)

Required Skills & Experience

• Certifications: DoD 8570 IAT Level II or higher (e.g., Security+ CE, CySA+, etc).
• Experience focused on cyber-risk reduction, vulnerability mitigation, and maintaining compliance frameworks for enterprise-scale endpoint infrastructure.
• Demonstrated technical experience performing continuous scanning, risk analysis, and endpoint patching workflows across hardware and mobile fleets.
• Working knowledge of risk reduction governance, baseline compliance frameworks, and security automation principles within cloud and virtual desktop architectures.
• Ability to collaborate effectively with engineers to translate technical system configurations into risk reduction strategies for modern collaboration platforms .

Clearance Level: Must have an active Secret clearance

Preferred Skills & Experience

• Prior experience supporting USCG C5I initiatives or software modernization programs through continuous scanning and automated exposure reduction.
• Advanced baseline cybersecurity certifications focused on governance and risk mitigation (e.g., CCISO, CISM, CISSP, or GSLC).
• Strong written communication skills to articulate risk metrics, vulnerability statuses, and compliance posture of digital workplace solutions to leadership .

#USCG #DICE