Minimum 10 years of cybersecurity/information security experience
Active DoD IAT Level II Certification (Security+, CySA+, SSCP, etc.)
Active Computing Environment (CE) Certification (AWS, Azure, Linux+, VCP, etc.)
Active DoD Secret Clearance (or eligibility)
Strong experience with HBSS/endpoint security platforms, vulnerability assessments, eMASS and GRC tools, incident response/threat analysis, RMF/STIG/IAVA compliance, and cloud security.
Responsibilities
Design, implement, and maintain security controls to protect information systems and data
Conduct technical assessments to identify vulnerabilities and recommend remediation strategies
Ensure compliance with industry standards and regulations
Collaborate with cross-functional teams to implement security controls in AWS and other cloud environments
Monitor and audit configurations to prevent unintended changes
Act as a trusted advisor to clients on cybersecurity and data protection
Lead technical discussions and presentations to communicate security solutions effectively
Benefits
Opportunity to work in a dynamic and collaborative environment
Engagement with cutting-edge cybersecurity technologies
Professional development and continuous learning opportunities
Access to a network of experienced cybersecurity professionals
Contribution to national security through defense-related projects
Full Job Description
Job Title: Information Systems Security Engineer (ISSE)
Location: Arlington, VA
We are seeking an experienced Information Systems Security Engineer (ISSE) to join our team in Arlington, VA. The ideal candidate will have a strong technical background in cybersecurity, with hands-on experience in assessments, incident response, threat hunting, threat intelligence, malware analysis, and network security.
Responsibilities:
Design, implement, and maintain security controls to protect information systems and data
Conduct technical assessments to identify vulnerabilities and recommend remediation strategies
Ensure compliance with industry standards and regulations
Collaborate with cross-functional teams to implement security controls in AWS and other various cloud computing environments
Ensure the environment is updated according to DoD standards and guidelines
Follow approved DoD, STIG standards and DoD IAVA requirements; advise / make recommendations of needed updates to HBSS Lead
Ensure that all systems are operating with valid licenses for all installed software
Monitor and audit configurations to ensure that unintended changes do not occur
Act as a trusted advisor to clients, understanding cybersecurity or data protection requirements and challenges
Lead technical discussions, demonstrations, and presentations, effectively communicating the value proposition of our security solutions to both technical and non-technical stakeholders
Continuous knowledge of industry trends and emerging threats in cyber security to continuously enhance our solutions and customer value
Work collaboratively with team members, Information Assurance, Information Security Engineering, and other Subject Matter Experts to resolve security issues
Solid understanding of cybersecurity principles, including, malware analysis, network security, and cloud security
Solid understanding of security operations, networking, system administration and security architecture
A clear understanding of cyber risks and the threat landscape related to cyber attacks
Maintain thorough documentation of all activities and communications through ticketing systems, operational briefs, and status reports
Support RMF lifecycle activities including system authorization and ATO efforts
Ensure compliance with DoD, NIST, STIG, and IAVA requirements
Develop and maintain System Security Plans (SSPs) and IA artifacts
Validate security control implementation and effectiveness
Coordinate with ISSOs, system owners, and auditors
Track POA&M items and remediation status
Advise stakeholders on compliance gaps and risk posture
Implement and validate security controls in AWS and cloud environments
Assess cloud configurations for risk and compliance alignment
Support secure system migrations and modernization efforts
Create scan policies, credential management, and endpoint/Nessus agent management on Tenable Nessus Manager
Review and apply Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) requirements to servers and endpoints
Perform eMASS or other GRC tools tasks, including system registration & boundary definition, document control implementation, and security control assessment support
Requirements:
Bachelor's degree from accredited university
Minimum 10 years of cybersecurity / information security experience
Active DoD IAT Level II Certification (Security+, CySA+, SSCP, etc.)
Active Computing Environment (CE) Certification (AWS, Azure, Linux+, VCP, etc.)
