ISSE - (Polygraph Required)

About the Team

Here at BTI360, we’ve built a culture that’s passionate about developing software engineers. Software doesn’t build itself – people do. Our primary focus is on developing better craftsmen, better teammates, and better technical leaders. By putting people first, we give teammates more opportunities to grow while raising the bar of the software we ship. BTI360 has been voted a TOP Place to Work by the Washington Business Journal for ten consecutive years.

About the Role

BTI360 is looking to add an Information System Security Engineer (ISSE) to our team. In this mission‑critical role you will ensure our software systems meet security and compliance requirements, guide development teams through the Authorization & Accreditation (A&A) process from design through deployment, and serve as a bridge between technical teams, security stakeholders, and accrediting authorities.

Responsibilities

• Lead or support the Authorization & Accreditation (A&A) process for multiple software systems.
• Interpret and apply Sponsor‑specific security requirements, policies, and control frameworks (based on NIST and Sponsor overlays).
• Collaborate with engineering teams early in the development lifecycle to design systems that meet security, compliance, and mission needs.
• Prepare and maintain security documentation.
• Guide teams through the accreditation process, ensuring documentation and system posture align with Sponsor expectations.
• Interface directly with Information System Security Managers (ISSMs), Authorizing Officials (AOs), and other security stakeholders.
• Provide security engineering input on architecture, data flows, boundary protections, and cloud configurations.
• Champion secure development practices and influence teams to make thoughtful trade‑offs between risk, performance, and agility.
• Track security posture and coordinate ongoing security monitoring, updates, and control implementation as systems evolve.
• Lead briefings and meetings with the Sponsor.

Minimum Requirements

• Active TS/SCI with Polygraph required at time of application.
• Proven experience supporting the Authorization & Accreditation (A&A) of classified systems in the Sponsor environment.
• Deep understanding of security controls, risk assessments, and documentation required for ATO submissions.
• Strong collaboration skills and the ability to partner with software engineers, architects, and mission stakeholders.
• Familiarity with cloud security architectures and controls (AWS preferred).
• Excellent communication skills and comfort engaging with both technical and non‑technical audiences.

Preferred Skills

• Experience accrediting systems at higher classification levels.
• Background in software engineering, DevSecOps, or IT systems engineering.
• Familiarity with ICD 503, RMF, and Sponsor‑specific overlays.
• Experience with Sponsor‑specific tooling such as Nessus, Rapid7, WebInspect, AppDetect, and/or Nipper.
• Experience with containerized deployments, Infrastructure‑as‑Code (IaC), or automated compliance tooling.
• Security certifications such as CISSP, CAP, or AWS Security Specialty.
• Experience with continuous ATO (cATO) processes, FedRAMP, or other relevant compliance pipelines.

Benefits

• Fully paid healthcare premiums.
• Competitive salaries and performance bonuses.
• Career development and in‑house training.
• Tuition reimbursement.
• Up to 5 weeks PTO