Senior Information Systems Security Engineer (ISSE)

We are seeking a highly skilled and experienced Principal Information System Security Engineer to join our team. The successful candidate will bring extensive knowledge and hands-on experience in cybersecurity engineering, risk management frameworks, and secure software development lifecycle management.

Responsibilities

• Oversee cybersecurity measures for applications within an agile software environment.
• Manage the assessment and authorization (A&A) efforts for accrediting and reaccrediting system authorizations.
• Utilize common control provider (CCP) knowledge to secure authorization for applications on new platforms.
• Work closely with stakeholders to ensure seamless decommissioning and accreditation of replacement systems with no downtime.
• Conduct technical exchange meetings (TEMs) and liaise with key departments to facilitate A&A efforts.
• Track and manage Plan of Action and Milestones (POAMs) across all systems, ensuring completion and recommending remediation steps.
• Conduct system self-scans to support initial, update, and reaccreditation efforts.
• Perform technical planning, system integration, verification and validation, and risk assessments.
• Create Basis of Estimate (BOE) documentation and other critical artifacts for system A&A efforts.
• Develop and document security evaluation of test plans and procedures.
• Provide documentation and recommendations for security best practices and risk management framework (RMF) accreditation.
• Drive application security and secure software development lifecycles, including containerization security as per NIST SP 800-190.
• Conduct hands-on security testing, analyze test results, and recommend countermeasures.
• Provide guidance on cloud computing services, deployment architecture, and network management tools.
• Review project requirements and assist in the development and tracking of project tasks and client deliverables.
• Communicate with clients on project specific activities and manage project related deliverables.
• Facilitate process working groups to analyze existing processes and create new business strategies.

Requirements

• Bachelor's Degree in Security and Intelligence, or a related field.
• Security+ CE, AWS Advanced Architect, and Splunk Fundamentals 1 and 2 certifications.
• Extensive experience in information system security engineering, risk assessment, and vulnerability management.
• Strong understanding of cloud computing services, secure software development lifecycles, and containerization security.
• Proficient in creating and maintaining security documentation and Standard Operating Procedures (SOPs).
• Demonstrated experience in leading technical exchange meetings, managing project deliverables, and ensuring compliance with security standards and policies.
• TS/SCI w/ poly clearance required.
• Minimum 8 years of experience.

Preferred: Excellent technical writing and documentation skills. Proven ability to collaborate with multidisciplinary teams.

Pay

$190,000 - $225,000

Benefits

• Health, dental, and vision insurance
• Paid time off and holidays
• Retirement benefits (including 401(k) matching)
• Educational reimbursement
• Parental leave
• Employee stock purchase plan
• Tax-saving options
• Disability and life insurance
• Pet insurance

Note: Benefits may vary based on employment type, location, and applicable agreements.