Information System Security Engineer (ISSE)

Information System Security Engineer (ISSE)

As an Information Systems Security Engineer (ISSE), you'll:

• Facilitate sub-projects as they go through the Risk Management Framework (RMF) accreditation life cycle.
• Support the periodic system security scans as required by policy and the RMF.
• Validate and verify system security requirement definitions and analyze system security designs.
• Perform technical security assessments of computing environments to identify points of vulnerability, and then recommend mitigation strategies for those that do not comply with established Information Assurance (IA) standards.
• Experience manually reviewing network diagrams, network device configurations, termination points for VPNs, and a working knowledge of software TLS security.
• Able to maintain a flexible and non-traditional RMF review of secure networks to assess and prescribe countermeasures for secure communications e.g. analog radio, mobile cellular, remote kits, software/hardware-based VPN solutions and VDI technologies.
• Familiar with applying different standards and security frameworks to include CIS benchmarks, FIPS 140-2, DISA Stigs, CNSA cryptographic suite compliance, etc.
• Participated as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments.
• Participated as a security engineering representative on engineering teams for the design, development, implementation and/or integration of IA architectures, systems, or system components.
• Supported the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
• Applied knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments.
• Supported security planning, assessment, risk analysis, and risk management.
• Identified overall security requirements for the proper handling of Government data.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• Must hold and maintain an appropriate DoD 8140.03 / 8570.01-M certification baseline for this labor category (e.g., Security+, CISSP, CISM, or equivalent as required).
• At least 7 years of experience in cybersecurity engineering, RMF/DIACAP accreditation, and compliance documentation in DoD environments.
• Expertise in the application of DISA STIGs/SRGs, ACAS/HBSS vulnerability analysis, and eMASS package preparation.
• Strong written and verbal communication skills, with demonstrated experience producing accreditation documentation and presenting risk findings to senior stakeholders.

Desired Qualifications:

• Master's degree in Cybersecurity or related discipline.
• Experience supporting DISA programs and preparing for CCRI inspections.
• Advanced certifications such as CISSP-ISSAP or CISM.

Clearance Requirement: Active Top Secret / SCI clearance.