Information Systems Security Policy Engineer

Job Title: Information Systems Security Engineer Job Category: Information
Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI
Employee Type: Regular Percentage of Travel Required: None Type of Travel: None
Anticipated Posting End: 8/1/2026 The Opportunity: The Information Systems
Security Engineer (ISSE) serves as the primary technical authority for the
responsible for integrating security engineering principles into every phase of
the Software Development Life Cycle to design and maintain secure architectures.
You will collaborate with software developers, systems engineers, and government
stakeholders to navigate the Risk Management Framework (RMF) lifecycle and
maintain the Authority to Operate (ATO) for complex cloud and on-premise
Responsibilities: RMF & ATO Management: Lead the end-to-end Risk
coordinating with cybersecurity entities (SCA/DAO) to secure and maintain
Security Engineering & Cloud Oversight: technologies, and providing security oversight for cloud-based platforms
(AWS/Azure). Vulnerability & Risk Mitigation: Conduct system inspections and
ensure robust disaster recovery and contingency planning. Monitoring: Establish continuous monitoring protocols to track security posture,
enforce cybersecurity policies, and brief complex technical risks to senior
Qualifications: Required: Education and Experience Bachelor’s
Degree in Computer Science, Information Technology, Cybersecurity, Engineering,
or related degree Minimum of 5 years of progressive experience in Cybersecurity,
Security+, CCNA Security, or
Risk Management & Compliance Full RMF Lifecycle Mastery: navigating the Risk Management Framework (NIST 800-37) to secure and maintain
Control Implementation: Expert knowledge of NIST
Ability to author cybersecurity
policies, manage POA&Ms, and develop Contingency/Disaster Recovery plans.
Engineering & Operations Technical Oversight: Continuous Monitoring: Proficiency in conducting security
inspections, audits, and vulnerability analysis to track patch effectiveness and
Cloud Security: Functional understanding of security operations
within AWS or Azure environments. Engagement: Proven ability to brief complex technical risks to large groups and
Desired: Basic understanding of the software development
lifecycle Experience working with governance risk and compliance tools (i.e.
Splunk, Anchore, etc.) high-performing group dedicated to our customer’s missions and driven by a
higher purpose - to ensure the safety of our nation. and our customers - every day. need through a unique flexible time off benefit and have access to robust
geographic location, Federal Government contract labor categories and contract
wage rates, relevant prior work experience, specific skills and competencies,
allows them to balance quality work and their personal lives. healthcare, wellness, financial, retirement, family support,
pregnancy, sexual orientation, age, national origin, disability, status as a
protected veteran, or any other protected characteristic.