ISSE (Hybrid) - 29506

Job Description

Job Description:\n\nInformation Systems Security Engineer (ISSE) – Hybrid\nLocation: Columbia, MarylandWork Arrangement: Hybrid (Approximately 1–2 Days Onsite Per Week)Required Clearance: Active TS/SCI with Full Scope Polygraph\nWyetech is seeking an experienced Information Systems Security Engineer (ISSE) to support the design, development, implementation, assessment, and authorization of secure information systems and network architectures within mission-critical Department of Defense (DoD) environments.\nThe ISSE will provide cybersecurity engineering expertise across complex, multi-tiered systems and multiple security enclaves, including environments with differing classification levels and data protection requirements. This position requires a strong understanding of distributed architectures, cloud-based systems, Big Data applications, and federal cybersecurity compliance requirements.\nThe successful candidate will collaborate with government stakeholders, cybersecurity professionals, system engineers, and software development teams to implement security controls, assess operational risks, manage Risk Management Framework (RMF) documentation, and maintain system authorization packages.\nThis position offers a hybrid work arrangement requiring approximately one to two days per week onsite in Columbia, Maryland. Candidates must be flexible to accommodate changes to onsite schedules based on mission and operational requirements.\nRequired Skills/Experience:\n\n \n Active TS/SCI clearance with Full Scope Polygraph.\n \n Demonstrated Information Systems Security Engineering experience supporting large, complex, multi-tiered programs and enterprise environments.\n \n Experience designing, implementing, and evaluating secure system and network architectures spanning multiple enclaves with differing classification and data protection requirements.\n \n Experience implementing DoD system accreditation and authorization processes, including DIACAP or RMF, with RMF experience preferred.\n \n Strong understanding of the National Institute of Standards and Technology (NIST) SP 800-53 security control framework, including control inheritance, security control implementation, assessment, and authorization artifact generation.\n \n Experience creating, reviewing, editing, and maintaining system authorization documentation in accordance with federal and DoD cybersecurity policies.\n \n Hands-on experience navigating RMF workflows, uploading security authorization artifacts, and managing Plans of Action and Milestones (POA&Ms) within eMASS, Xacta, or equivalent RMF systems of record.\n \n Experience interpreting, applying, and validating Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).\n \n Experience using vulnerability management systems, automated security scanning tools, and security compliance platforms.\n \n Experience reviewing vulnerability scan results, identifying security deficiencies, documenting findings, implementing mitigation strategies, and tracking remediation activities.\n \n Experience evaluating cybersecurity and operational risks associated with integrated open-source, Commercial Off-the-Shelf (COTS), and Government Off-the-Shelf (GOTS) software components.\n \n Working knowledge of TCP/IP protocols and services, computer architectures, network topologies, and secure networking principles.\n \n Understanding of distributed computing architectures, cloud-based systems, and security considerations associated with Big Data applications.\n \n Experience performing security planning, risk assessments, security control evaluations, risk analysis, and risk management activities.\n \n Ability to recommend system-level security solutions and collaborate with engineering and development teams to achieve required security postures.\n \n Strong knowledge of federal and DoD Information Assurance (IA) policies, procedures, and cybersecurity requirements.\n \n Ability to independently assess complex technical issues, interpret security requirements, and develop defensible compliance processes when established procedures are unavailable.\n \n Strong analytical, technical documentation, communication, and interpersonal skills.\n \n Ability to work independently and collaboratively within multidisciplinary engineering and cybersecurity teams.\n \n Ability to support a hybrid schedule requiring approximately one to two days per week onsite in Columbia, Maryland.\n\nRequired Certification:\nMust meet applicable DoD 8140 Information Assurance Technical (IAT) Level II qualification requirements.\nExamples of qualifying certifications identified for this position include:\n\n \n CompTIA Security+\n \n Systems Security Certified Practitioner (SSCP)\n \n Cisco Certified Network Associate Security (CCNA Security)\n \n GIAC Security Essentials Certification (GSEC)\n\nCertification acceptance must align with current DoD workforce qualification requirements and applicable contract provisions.\nDesired Skills/Certifications:\n\n \n Certified Information Systems Security Professional – Information Systems Security Engineering Professional (CISSP-ISSEP) certification is highly desired.\n \n Experience developing Bash scripts to automate security administration, compliance validation, or operational processes.\n \n Experience supporting containerized applications and infrastructure using Kubernetes.\n \n Experience creating network diagrams, system architecture diagrams, and technical documentation using Microsoft Visio or draw.io.\n \n Experience administering, configuring, or securing Red Hat Enterprise Linux (RHEL) environments.\n \n Experience supporting and securing Amazon Web Services (AWS) cloud infrastructure and services.\n\nThe Information Systems Security Engineer provides cybersecurity engineering expertise throughout the system development, authorization, and operational lifecycle. The engineer evaluates security requirements, develops and implements technical safeguards, supports risk management activities, and ensures that information systems comply with applicable federal and DoD security standards.\nThe ISSE works closely with government representatives, system engineers, software developers, and cybersecurity teams to maintain secure system architectures, identify vulnerabilities, and implement effective risk mitigation strategies.\nResponsibilities and Capabilities:\n\n \n Design, evaluate, and support secure system and network architectures encompassing multiple enclaves with differing classification and data protection requirements.\n \n Create, review, edit, and maintain security authorization documentation in accordance with federal and DoD cybersecurity policies.\n \n Implement and support DoD RMF processes throughout the system development, assessment, authorization, and operational lifecycle.\n \n Apply NIST SP 800-53 security controls, evaluate control inheritance, and develop supporting compliance and authorization artifacts.\n \n Navigate eMASS, Xacta, or equivalent RMF systems of record to manage authorization workflows, upload security documentation, track assessments, and maintain POA&Ms.\n \n Interpret and apply DISA STIGs and SRGs to evaluate system configurations and support compliance with established security requirements.\n \n Conduct vulnerability assessments, analyze automated security scan results, identify deficiencies, and recommend appropriate remediation strategies.\n \n Track security findings, mitigation activities, and corrective actions to support continuous monitoring and authorization maintenance.\n \n Assess cybersecurity and operational risks associated with integrating open-source, COTS, and GOTS software components into mission systems.\n \n Provide security planning, assessment, risk analysis, and risk management support for enterprise information systems and applications.\n \n Recommend system-level technical solutions to address security requirements, mitigate vulnerabilities, and improve overall system security posture.\n \n Collaborate with software developers, system engineers, and infrastructure teams to incorporate security requirements into system architectures and application designs.\n \n Support the Government in establishing, evaluating, and enforcing trusted relationships among interconnected systems and external architectures.\n \n Apply federal and DoD information assurance policies, procedures, and technical controls to develop secure networking, computing, and enclave environments.\n \n Evaluate TCP/IP communications, network architectures, system interfaces, and infrastructure components to identify potential security vulnerabilities.\n \n Support cybersecurity engineering activities involving distributed architectures, cloud-based systems, and Big Data applications.\n \n Facilitate requirements gathering, technical information exchanges, engineering reviews, and cybersecurity discussions with government and contractor stakeholders.\n \n Follow established security engineering and compliance processes while developing and implementing defensible procedures when formal guidance is unavailable.\n \n Maintain security authorization packages, compliance documentation, risk assessments, and supporting technical artifacts.\n \n Support continuous monitoring, security control assessments, vulnerability remediation, and ongoing authorization activities.\n \n Prepare technical findings, risk assessments, mitigation recommendations, and compliance reports for government and program leadership.\n \n Collaborate with cybersecurity, systems engineering, networking, and software development teams to resolve complex security-related issues.\n \n Support improvements to security engineering processes, compliance workflows, documentation standards, and risk management practices.\n \n Perform additional information systems security engineering responsibilities as required to support mission objectives.\n\nQualifications:\nCandidates must meet one (1) of the following education and experience combinations:\n\n \n Bachelor's degree in a related technical discipline from an accredited college or university, plus nine (9) years of relevant Information Systems Security Engineering experience supporting large, multi-tiered programs.\n\nOR\n\n \n Master's degree in a related technical discipline from an accredited college or university, plus seven (7) years of relevant experience.\n\nOR\n\n \n High school diploma or equivalent, plus thirteen (13) years of relevant Information Systems Security Engineering experience.\n\nAdditional Qualifications:\n\n \n Must possess and maintain an active TS/SCI security clearance with Full Scope Polygraph.\n \n Must meet applicable DoD 8140 IAT Level II certification requirements.\n \n Must demonstrate experience implementing DoD system accreditation processes, with RMF experience preferred.\n \n Must possess working knowledge of NIST SP 800-53 security controls, DISA STIGs/SRGs, vulnerability management, and DoD cybersecurity compliance requirements.\n \n Must demonstrate hands-on experience with RMF authorization workflows and POA&M management using eMASS, Xacta, or equivalent systems.\n \n Must be capable of independently performing technical security engineering activities while collaborating effectively with government stakeholders and multidisciplinary teams.\n \n Must be available to work onsite approximately one to two days per week in Columbia, Maryland, with flexibility to accommodate mission-driven schedule changes.\n\nSecurity Clearance and Additional Requirements:\n\n \n Required Clearance: Active TS/SCI with Full Scope Polygraph.\n \n U.S. Citizenship required.\n \n Must maintain applicable security clearance, certification, and program access requirements throughout employment.\n\nAt Wyetech, you’ll be at the center of an award-winning corporate culture, breaking technological barriers and solving real-world problems for our federal government customers. We are committed to hiring the best of the best, and in return, we offer a world-class, truly unique employee experience that is rare within our industry.\nWyetech believes in generously supporting employees as they prepare for retirement. The company automatically contributes 20% of each employee's gross compensation to a Simplified Employee Pension (SEP) IRA, with no requirement for employee matching. All contributions are fully vested from day one, ensuring immediate ownership of retirement funds.\nAdditional benefits include:\nWyetech provides a generous PTO plan of up to 200 hours annually, aligned with applicable state leave regulations. Employees have the flexibility to adjust their PTO allocation at the start of each calendar year, ensuring it meets their evolving needs.\nFull-time employees have the option to participate in a variety of voluntary benefit plans including:\n\n \n A Choice of Medical Plan Options, some with Health Savings Account (HSA)\n \n Vision and Dental\n \n Life and AD&D Benefits\n \n Short and Long-Term Disability\n \n Hospital Indemnity, Accident, and Critical Illness Insurances\n \n Optional Identity Theft and Legal Protection Services\n \n Employee Referral Bonus Eligibility up to $10,000\n \n Mobility Among Wyetech-supported Contracts\n \n Various contract and work locations throughout Maryland, Virginia, Colorado, Texas, Utah, Alaska, Hawaii and OCONUS\n \n Various team-building events throughout the year, such as monthly lunches, summer company picnic, and an annual holiday party.\n \n Employees receive two complimentary branded clothing orders annually.\n\nHourly Pay Range: $51.84–$118.91\nHourly pay rates listed for this position serve as a general guideline and are not a guarantee of compensation. Compensation will vary dependent upon factors including but not limited to: Government contract rates; education; relevant prior work experience, knowledge, skills, and competencies; certifications; and geographic location. Hourly pay rates reflect the pre-benefit gross wage amounts.\nWyetech, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. \nAffirmative Action Statement:\nWyetech, LLC is committed to the principles of affirmative action in all hiring and employment for minorities, women, individuals with disabilities, and protected veterans.\nAccommodations:\nWyetech, LLC is committed to providing an inclusive and accessible hiring process. If you need any accommodations during the application or interview process, please contact Brittney Wood. at 844-WYETECH x727 or View email address on ziprecruiter.com. We are happy to provide reasonable accommodations to ensure equal access to all candidates. \nWyetech Terms and Conditions:\n 1. Wyetech may reach out to you via SMS messages during the course of your Wyetech candidacy.\n 2. You can cancel the SMS service at any time. Just text "STOP" to the short code. After you send t