IT Modernization Information Systems Security Engineer

Responsibilities Develop and maintain system security artifacts, including Security Plans, Security Controls Traceability matrices, architectural diagrams, and engineering documentation. Perform security engineering analyses, such as threat modeling, vulnerability assessments, and security impact assessments of proposed changes. Conduct requirements analysis, design, and integration for complex software applications and collaboration infrastructures. Participate in the change management process: submit and review Change Requests (CRs) and assess the security impact of proposed changes. Collaborate with ISSOs, system administrators, and development teams to remediate vulnerabilities and ensure secure system configurations. Evaluate cloud supporting technologies in encryption, identity and access control, boundary protection, and logging/monitoring. Support incident response and forensic analysis as needed, coordinating with organizational cybersecurity teams. Assist in developing and executing governance frameworks for managing and authorizing national security systems. Apply secure systems engineering practices, including threat modeling, security architecture design, and system hardening. Develop software in Java, Python, Ruby, and/or C++ on Linux platforms. Conduct dynamic and static application security scanning using tools such as OPSWAT, OWASP ZAP, BurpSuite, and Fortify. Use vulnerability management tools such as Tenable, Defender, and SIEM technologies. Perform infrastructure security scanning, vulnerability scanning with NMAP, Azure Defender, AWS Inspector, and ACAS/Nessus. Qualifications Bachelor's degree in engineering, computer science, cybersecurity, networking, or programming (Master's degree desired). Current or active Top Secret/SCI clearance and current or recent DoD SAP access. Information Systems Security Engineering Professional (ISSEP) certification. Certified Cloud Security Professional (CCSP) certification. Certified Information Systems Security Professional (CISSP) certification. CompTIA Advanced Security Practitioner (CASP) certification. GIAC Cloud Security Essentials Certification (GCLD). Experience in software development on Linux and with security-focused tools. Proficiency in dynamic and static application security scanning. Hands‑on experience with vulnerability management and SIEM tools. Knowledge of infrastructure security scanning tools such as NMAP, Azure Defender, AWS Inspector, and ACAS/Nessus. #J-18808-Ljbffr Modern Technology Solutions, Inc.