1767 - Senior Information Systems Security Engineer (ISSE)
for each heading. Use - for lists. Use
for prose.
We must preserve all substantive info. Remove boilerplate: EEO, etc. Also remove navigation, cookie, legal, duplicated lines, application instructions. Also remove "Equal Opportunity Employer/Veterans/Disabled:" line. Also remove "Personnel Clearance Level:"? That's substantive (clearance requirement) so keep. Also "Education Requirements:" keep.
We need to parse content.
Let's extract sections:
Job posting text:
Sigma Defense is seeking a Senior Information Systems Security Engineer (ISSE) to join our team in Rome, NY.
[EEO line - remove]
Requirements
8+ years of experience in information systems security engineering, cybersecurity engineering, or a closely related technical discipline
Strong hands-on experience with ACAS, including vulnerability scanning, results analysis, remediation tracking, and validation
Demonstrated experience implementing cybersecurity requirements under the DoD Risk Management Framework (RMF)
Strong understanding of Zero Trust architecture and security principles and their application within RMF environments
Hands-on experience with Microsoft Azure security technologies and cloud security architecture
Experience developing and administering Azure Policy for security, governance, and compliance enforcement
Experience with Microsoft Defender for Cloud, including security posture management, recommendations, regulatory compliance, and workload protection
Experience with Xacta, with an emphasis on automation, RMF workflow improvement, evidence management, or continuous authorization
Experience with infrastructure automation and Infrastructure as Code (IaC) concepts and technologies
Ability to translate cybersecurity requirements and security controls into technical configurations and automated enforcement mechanisms
Strong understanding of vulnerability management, system hardening, security-control implementation, and continuous monitoring
Must be a U.S. citizen
Mandatory Certifications: Required:
CompTIA Security+
Certified Information Systems Security Professional (CISSP)
ACAS Operator and Supervisor Course
Desired:
Microsoft AZ104
Microsoft AZ500
Computer Programs/Software: ACAS
Defender for Cloud
Xacta
Personnel Clearance Level: Candidate must possess or have the ability to obtain an active TS/SCI security clearance or higher
Clearance may be sponsored for the right candidate
Education Requirements: Bachelor's degree from an accredited college or university in a Cybersecurity or related field of study.
Essential Job Duties (not all-inclusive):
Serve as a senior cybersecurity engineering resource supporting the implementation and maintenance of security controls throughout the system lifecycle
Apply RMF principles within Zero Trust architectures, translating security and compliance requirements into practical technical controls
Perform and support vulnerability assessment and continuous monitoring activities using Assured Compliance Assessment Solution (ACAS)
Analyze ACAS scan results, identify vulnerabilities, configuration deficiencies, and work with engineering teams to develop and validate remediation strategies
Design, implement, and maintain security controls within Microsoft Azure environments
Develop and manage Microsoft Azure Policy initiatives, assignments, exemptions, and compliance controls to enforce security requirements at scale
Utilize Microsoft Defender for Cloud to assess security posture, identify vulnerabilities and misconfigurations, monitor compliance, and improve cloud workload protection
Support the implementation of Zero Trust security principles, including identity, device, network, application, workload, and data security controls
Develop and maintain Xacta automation capabilities to improve RMF documentation, evidence collection, control validation, and continuous authorization processes
Automate security and compliance processes through Infrastructure as Code (IaC) and other infrastructure automation technologies
Integrate security requirements and compliance validation into automated deployment and configuration-management workflows
Develop repeatable methods for collecting security-control evidence and reducing manual RMF and assessment activities
Collaborate with system architects, cloud engineers, DevSecOps teams, system administrators, ISSOs, and other cybersecurity personnel
Provide technical guidance on system security architecture, control implementation, vulnerability remediation, and cybersecurity risk
Support security assessments, authorization activities, continuous monitoring, and ongoing maintenance of the system's security posture
Salary Range: $125,000 - $155,000 annually.
Benefits
Dental and Vision Insurance
Medical Insurance to Include HSA, FSA, and DFSA Plans
Life and AD&D coverage
Employee Assistance Program (EAP)
401(k) Plan with Company Matching Contributions
160 Hours of Paid Time Off (PTO)
12 (Floating) Holidays
Educational Assistance
Highly Competitive Salary
We need to decide sections.
Responsibilities: list of duties (Essential Job Duties). Use
- .
Requirements: list of requirements (the bullet list under Requirements). Could include experience, certifications, clearance, education? But we have separate sections for Qualifications (education, certifications, clearance) and Skills (technical skills). However we must not create thin sections; better to combine.
We have many items: experience, hands-on experience with ACAS, RMF, Zero Trust, Azure, Azure Policy, Defender for Cloud, Xacta, IaC, ability to translate requirements, vulnerability management, US citizen, mandatory certifications, desired certifications, computer programs, clearance, education.
We could have:
- Requirements: experience and core competencies (8+ years, hands-on experience with ACAS, RMF, Zero Trust, Azure, Azure Policy, Defender for Cloud, Xacta, IaC, ability to translate, vulnerability management, US citizen). Use
.
- Qualifications: education, certifications, clearance. Use .
- Skills: technical skills list (ACAS, Defender for Cloud, Xacta, Azure, Azure Policy, IaC, etc). But many overlap with requirements. Might be redundant. Perhaps better to have just Requirements and Qualifications and Benefits and Pay. Avoid thin sections.
But we need to follow instruction: Prefer a few substantive sections over many thin ones. So maybe we have sections: Responsibilities, Requirements, Qualifications, Benefits, Pay.
We must include all substantive info. Let's see if we can fit everything.
Responsibilities: list of duties.
Requirements: list of experience and technical hands-on experience (including ACAS, RMF, Zero Trust, Azure, Azure Policy, Defender for Cloud, Xacta, IaC, ability to translate, vulnerability management, US citizen). Also maybe include "Strong hands-on experience with ACAS, including vulnerability scanning, results analysis, remediation tracking, and validation" etc.
Qualifications: education (Bachelor's degree), certifications (CompTIA Security+, CISSP, ACAS Operator and Supervisor Course; desired: AZ104, AZ500), clearance (TS/SCI ability), maybe also mention "Computer Programs/Software: ACAS, Defender for Cloud, Xacta" but that's more skills; could be placed under Requirements or Qualifications. But we already have technical experience in Requirements; we could put software familiarity under Qualifications as well.
Benefits: list.
Pay: Salary Range.
We must not create sections with filler like "not specified". All sections have content.
Now produce HTML.
Structure:
Responsibilities
- ...
...
Requirements
- ...
...
Qualifications
- ...
...
Benefits
- ...
...
Pay
$125,000 - $155,000 annually.
Make sure no extra whitespace? It's fine.
Now craft lists.
Responsibilities items (from Essential Job Duties):
- Serve as a senior cybersecurity engineering resource supporting the implementation and maintenance of security controls throughout the system lifecycle
- Apply RMF principles within Zero Trust architectures, translating security and compliance requirements into practical technical controls
- Perform and support vulnerability assessment and continuous monitoring activities using Assured Compliance Assessment Solution (ACAS)
- Analyze ACAS scan results, identify vulnerabilities, configuration deficiencies, and work with engineering teams to develop and validate remediation strategies
- Design, implement, and maintain security controls within Microsoft Azure environments
- Develop and manage Microsoft Azure Policy initiatives, assignments, exemptions, and compliance controls to enforce security requirements at scale
- Utilize Microsoft Defender for Cloud to assess security posture, identify vulnerabilities and misconfigurations, monitor compliance, and improve cloud workload protection
- Support the implementation of Zero Trust security principles, including identity, device, network, application, workload, and data security controls
- Develop and maintain Xacta automation capabilities to improve RMF documentation, evidence collection, control validation, and continuous authorization processes
- Automate security and compliance processes through Infrastructure as Code (IaC) and other infrastructure automation technologies
- Integrate security requirements and compliance validation into automated deployment and configuration-management workflows
- Develop repeatable methods for collecting security-control evidence and reducing manual RMF and assessment activities
- Collaborate with system architects, cloud engineers, DevSecOps teams, system administrators, ISSOs, and other cybersecurity personnel
- Provide technical guidance on system security architecture, control implementation, vulnerability remediation, and cybersecurity risk
- Support security assessments, authorization activities, continuous monitoring, and ongoing maintenance of the system's security posture
Requirements items:
- 8+ years of experience in information systems security engineering, cybersecurity engineering, or a closely related technical discipline
- Strong hands-on experience with ACAS, including vulnerability scanning, results analysis, remediation tracking, and validation
- Demonstrated experience implementing cybersecurity requirements under the DoD Risk Management Framework (RMF)
- Strong understanding of Zero Trust architecture and security principles and their application within RMF environments
- Hands-on experience with Microsoft Azure security technologies and cloud security architecture
- Experience developing and administering Azure Policy for security, governance, and compliance enforcement
- Experience with Microsoft Defender for Cloud, including security posture management, recommendations, regulatory compliance, and workload protection
- Experience with Xacta, with an emphasis on automation, RMF workflow improvement, evidence management, or continuous authorization
- Experience with infrastructure automation and Infrastructure as Code (IaC) concepts and technologies
- Ability to translate cybersecurity requirements and security controls into technical configurations and automated enforcement mechanisms
- Strong understanding of vulnerability management, system hardening, security-control implementation, and continuous monitoring
- Must be a U.S. citizen
Qualifications items:
- Bachelor's degree from an accredited college or university in a Cybersecurity or related field of study
- Required certifications: CompTIA Security+, Certified Information Systems Security Professional (CISSP), ACAS Operator and Supervisor Course
- Desired certifications: Microsoft AZ-104, Microsoft AZ-500
- Proficiency with computer programs/software: ACAS, Microsoft Defender for Cloud, Xacta
- Must possess or be able to obtain an active TS/SCI security clearance or higher (clearance may be sponsored for the right candidate)
Benefits items:
- Dental and Vision Insurance
- Medical Insurance to Include HSA, FSA, and DFSA Plans
- Life and AD&D coverage
- Employee Assistance Program (EAP)
- 401(k) Plan with Company Matching Contributions
- 160 Hours of Paid Time Off (PTO)
- 12 (Floating) Holidays
- Educational Assistance
- Highly Competitive Salary (though salary already in Pay; but it's listed as benefit; we can keep)
Pay section: just the range.
Now output HTML.
Check for any duplicated lines: we have "Highly Competitive Salary" in Benefits; but we also have Pay section. It's okay to keep as benefit but maybe redundant. However we must preserve ALL substantive information; we cannot drop it. So keep it.
Now produce
for prose. We must preserve all substantive info. Remove boilerplate: EEO, etc. Also remove navigation, cookie, legal, duplicated lines, application instructions. Also remove "Equal Opportunity Employer/Veterans/Disabled:" line. Also remove "Personnel Clearance Level:"? That's substantive (clearance requirement) so keep. Also "Education Requirements:" keep. We need to parse content. Let's extract sections: Job posting text: Sigma Defense is seeking a Senior Information Systems Security Engineer (ISSE) to join our team in Rome, NY. [EEO line - remove] Requirements 8+ years of experience in information systems security engineering, cybersecurity engineering, or a closely related technical discipline Strong hands-on experience with ACAS, including vulnerability scanning, results analysis, remediation tracking, and validation Demonstrated experience implementing cybersecurity requirements under the DoD Risk Management Framework (RMF) Strong understanding of Zero Trust architecture and security principles and their application within RMF environments Hands-on experience with Microsoft Azure security technologies and cloud security architecture Experience developing and administering Azure Policy for security, governance, and compliance enforcement Experience with Microsoft Defender for Cloud, including security posture management, recommendations, regulatory compliance, and workload protection Experience with Xacta, with an emphasis on automation, RMF workflow improvement, evidence management, or continuous authorization Experience with infrastructure automation and Infrastructure as Code (IaC) concepts and technologies Ability to translate cybersecurity requirements and security controls into technical configurations and automated enforcement mechanisms Strong understanding of vulnerability management, system hardening, security-control implementation, and continuous monitoring Must be a U.S. citizen Mandatory Certifications: Required: CompTIA Security+ Certified Information Systems Security Professional (CISSP) ACAS Operator and Supervisor Course Desired: Microsoft AZ104 Microsoft AZ500 Computer Programs/Software: ACAS Defender for Cloud Xacta Personnel Clearance Level: Candidate must possess or have the ability to obtain an active TS/SCI security clearance or higher Clearance may be sponsored for the right candidate Education Requirements: Bachelor's degree from an accredited college or university in a Cybersecurity or related field of study. Essential Job Duties (not all-inclusive): Serve as a senior cybersecurity engineering resource supporting the implementation and maintenance of security controls throughout the system lifecycle Apply RMF principles within Zero Trust architectures, translating security and compliance requirements into practical technical controls Perform and support vulnerability assessment and continuous monitoring activities using Assured Compliance Assessment Solution (ACAS) Analyze ACAS scan results, identify vulnerabilities, configuration deficiencies, and work with engineering teams to develop and validate remediation strategies Design, implement, and maintain security controls within Microsoft Azure environments Develop and manage Microsoft Azure Policy initiatives, assignments, exemptions, and compliance controls to enforce security requirements at scale Utilize Microsoft Defender for Cloud to assess security posture, identify vulnerabilities and misconfigurations, monitor compliance, and improve cloud workload protection Support the implementation of Zero Trust security principles, including identity, device, network, application, workload, and data security controls Develop and maintain Xacta automation capabilities to improve RMF documentation, evidence collection, control validation, and continuous authorization processes Automate security and compliance processes through Infrastructure as Code (IaC) and other infrastructure automation technologies Integrate security requirements and compliance validation into automated deployment and configuration-management workflows Develop repeatable methods for collecting security-control evidence and reducing manual RMF and assessment activities Collaborate with system architects, cloud engineers, DevSecOps teams, system administrators, ISSOs, and other cybersecurity personnel Provide technical guidance on system security architecture, control implementation, vulnerability remediation, and cybersecurity risk Support security assessments, authorization activities, continuous monitoring, and ongoing maintenance of the system's security posture Salary Range: $125,000 - $155,000 annually. Benefits Dental and Vision Insurance Medical Insurance to Include HSA, FSA, and DFSA Plans Life and AD&D coverage Employee Assistance Program (EAP) 401(k) Plan with Company Matching Contributions 160 Hours of Paid Time Off (PTO) 12 (Floating) Holidays Educational Assistance Highly Competitive Salary We need to decide sections. Responsibilities: list of duties (Essential Job Duties). Use
- .
Requirements: list of requirements (the bullet list under Requirements). Could include experience, certifications, clearance, education? But we have separate sections for Qualifications (education, certifications, clearance) and Skills (technical skills). However we must not create thin sections; better to combine.
We have many items: experience, hands-on experience with ACAS, RMF, Zero Trust, Azure, Azure Policy, Defender for Cloud, Xacta, IaC, ability to translate requirements, vulnerability management, US citizen, mandatory certifications, desired certifications, computer programs, clearance, education.
We could have:
- Requirements: experience and core competencies (8+ years, hands-on experience with ACAS, RMF, Zero Trust, Azure, Azure Policy, Defender for Cloud, Xacta, IaC, ability to translate, vulnerability management, US citizen). Use
- .
- Qualifications: education, certifications, clearance. Use
- ... ...
- ... ...
- ... ...
- ... ...
- .
- Skills: technical skills list (ACAS, Defender for Cloud, Xacta, Azure, Azure Policy, IaC, etc). But many overlap with requirements. Might be redundant. Perhaps better to have just Requirements and Qualifications and Benefits and Pay. Avoid thin sections.
But we need to follow instruction: Prefer a few substantive sections over many thin ones. So maybe we have sections: Responsibilities, Requirements, Qualifications, Benefits, Pay.
We must include all substantive info. Let's see if we can fit everything.
Responsibilities: list of duties.
Requirements: list of experience and technical hands-on experience (including ACAS, RMF, Zero Trust, Azure, Azure Policy, Defender for Cloud, Xacta, IaC, ability to translate, vulnerability management, US citizen). Also maybe include "Strong hands-on experience with ACAS, including vulnerability scanning, results analysis, remediation tracking, and validation" etc.
Qualifications: education (Bachelor's degree), certifications (CompTIA Security+, CISSP, ACAS Operator and Supervisor Course; desired: AZ104, AZ500), clearance (TS/SCI ability), maybe also mention "Computer Programs/Software: ACAS, Defender for Cloud, Xacta" but that's more skills; could be placed under Requirements or Qualifications. But we already have technical experience in Requirements; we could put software familiarity under Qualifications as well.
Benefits: list.
Pay: Salary Range.
We must not create sections with filler like "not specified". All sections have content.
Now produce HTML.
Structure:
Responsibilities
Requirements
Qualifications
Benefits
Pay
$125,000 - $155,000 annually.
Make sure no extra whitespace? It's fine. Now craft lists. Responsibilities items (from Essential Job Duties): - Serve as a senior cybersecurity engineering resource supporting the implementation and maintenance of security controls throughout the system lifecycle - Apply RMF principles within Zero Trust architectures, translating security and compliance requirements into practical technical controls - Perform and support vulnerability assessment and continuous monitoring activities using Assured Compliance Assessment Solution (ACAS) - Analyze ACAS scan results, identify vulnerabilities, configuration deficiencies, and work with engineering teams to develop and validate remediation strategies - Design, implement, and maintain security controls within Microsoft Azure environments - Develop and manage Microsoft Azure Policy initiatives, assignments, exemptions, and compliance controls to enforce security requirements at scale - Utilize Microsoft Defender for Cloud to assess security posture, identify vulnerabilities and misconfigurations, monitor compliance, and improve cloud workload protection - Support the implementation of Zero Trust security principles, including identity, device, network, application, workload, and data security controls - Develop and maintain Xacta automation capabilities to improve RMF documentation, evidence collection, control validation, and continuous authorization processes - Automate security and compliance processes through Infrastructure as Code (IaC) and other infrastructure automation technologies - Integrate security requirements and compliance validation into automated deployment and configuration-management workflows - Develop repeatable methods for collecting security-control evidence and reducing manual RMF and assessment activities - Collaborate with system architects, cloud engineers, DevSecOps teams, system administrators, ISSOs, and other cybersecurity personnel - Provide technical guidance on system security architecture, control implementation, vulnerability remediation, and cybersecurity risk - Support security assessments, authorization activities, continuous monitoring, and ongoing maintenance of the system's security posture Requirements items: - 8+ years of experience in information systems security engineering, cybersecurity engineering, or a closely related technical discipline - Strong hands-on experience with ACAS, including vulnerability scanning, results analysis, remediation tracking, and validation - Demonstrated experience implementing cybersecurity requirements under the DoD Risk Management Framework (RMF) - Strong understanding of Zero Trust architecture and security principles and their application within RMF environments - Hands-on experience with Microsoft Azure security technologies and cloud security architecture - Experience developing and administering Azure Policy for security, governance, and compliance enforcement - Experience with Microsoft Defender for Cloud, including security posture management, recommendations, regulatory compliance, and workload protection - Experience with Xacta, with an emphasis on automation, RMF workflow improvement, evidence management, or continuous authorization - Experience with infrastructure automation and Infrastructure as Code (IaC) concepts and technologies - Ability to translate cybersecurity requirements and security controls into technical configurations and automated enforcement mechanisms - Strong understanding of vulnerability management, system hardening, security-control implementation, and continuous monitoring - Must be a U.S. citizen Qualifications items: - Bachelor's degree from an accredited college or university in a Cybersecurity or related field of study - Required certifications: CompTIA Security+, Certified Information Systems Security Professional (CISSP), ACAS Operator and Supervisor Course - Desired certifications: Microsoft AZ-104, Microsoft AZ-500 - Proficiency with computer programs/software: ACAS, Microsoft Defender for Cloud, Xacta - Must possess or be able to obtain an active TS/SCI security clearance or higher (clearance may be sponsored for the right candidate) Benefits items: - Dental and Vision Insurance - Medical Insurance to Include HSA, FSA, and DFSA Plans - Life and AD&D coverage - Employee Assistance Program (EAP) - 401(k) Plan with Company Matching Contributions - 160 Hours of Paid Time Off (PTO) - 12 (Floating) Holidays - Educational Assistance - Highly Competitive Salary (though salary already in Pay; but it's listed as benefit; we can keep) Pay section: just the range. Now output HTML. Check for any duplicated lines: we have "Highly Competitive Salary" in Benefits; but we also have Pay section. It's okay to keep as benefit but maybe redundant. However we must preserve ALL substantive information; we cannot drop it. So keep it. Now produce