Information Systems Security Engineer

Information Systems Security Engineer (ISSE)

Location: Clarksburg, Maryland Work Model: Onsite Type: Direct Hire Compensation: $180,000 (salary) Schedule: 40 hours/week Clearance Required: Active TS/SCI with Polygraph (must be current) Certification Required: DoD 8570/8140 IASAE Level II (compliant)

Role Overview: We're hiring an Information Systems Security Engineer (ISSE) to support mission-critical work in a classified environment. In this role, you'll help build, secure, and maintain systems by applying cybersecurity engineering best practices across design, implementation, authorization, and ongoing compliance.

You'll be hands-on with the Risk Management Framework (RMF), Assessment & Authorization (A&A), ATO sustainment, control validation, continuous monitoring, and vulnerability/stig compliance efforts—partnering closely with security and technical teams.

What You'll Do:

• Support the full RMF lifecycle for classified systems (from planning through continuous monitoring)
• Contribute to A&A packages and help maintain ATOs over time
• Implement, assess, and validate security controls and technical requirements
• Build and maintain RMF documentation and "body of evidence" artifacts
• Support system boundary definition and security architecture documentation
• Run and analyze compliance/vulnerability scans; validate results (including false positives)
• Support STIG implementation, configuration hardening, and remediation verification
• Help manage patch validation and ongoing security compliance activities
• Participate in Continuous Monitoring (ConMon) activities and reporting

Required Qualifications (Must Have):

• Active TS/SCI with Polygraph security clearance
• DoD 8570/8140 IASAE Level II compliant certification (required)
• Strong working knowledge of RMF
• Experience supporting A&A activities and ATO processes
• Experience implementing/validating security controls and supporting continuous monitoring
• Familiarity with NIST SP 800-37 and NIST SP 800-53 (Rev. 3 and/or Rev. 5)
• Experience with RMF/cybersecurity tools such as: LATTEART, XACTA, BISCOTTI, WATCHCAT, STE
• Experience using compliance and configuration scanning tools
• Strong documentation, analytical, and troubleshooting skills

Nice To Have:

• Experience working in classified cybersecurity environments
• Familiarity with enterprise Linux, networking, and/or cloud environments
• Experience partnering with ISSOs, ISSMs, SCAs, and System Owners
• Experience supporting large-scale enterprise or mission systems
• Exposure to vulnerability management automation and reporting workflows

Certification Examples (IASAE Level II): Common qualifying certifications include:

• CISSP
• CASP+
• CCSP
• CSSLP