Cism

Cism Engineer Jobs

4 jobs found

Today

Senior Information Systems Security Engineer (ISSE) II

Raytheon Tucson, AZ

Tucson, AZ

Today

$108k - $205k/yr Full time Senior Cism CISSP

Apply Now

Job Description

100% onsite role in Tucson, Arizona supporting Classified Information Systems, with an opportunity to shape secure architectures across cybersecurity operations, digital technology, and engineering. You will serve as an individual-contributor Subject Matter Expert (SME), providing strategic guidance, security baselines, and technical evaluations that help programs move forward confidently.

Responsibilities

Deliver briefings and presentations for multiple levels of the business
Act as an SME for designated security tools, ensuring alignment with and support for Raytheon standard solutions
Develop, implement, and support technical standards while balancing program needs and mission requirements
Provide strategic direction with the ability to drive technological innovation
Collaborate with other architecture teams to design and develop secure, compliant technical solutions for deployment
Evaluate technical solutions for new technology, conducting gap analysis and risk evaluations for new capabilities
Provide expert technical advisement for customer discussions, negotiations, approval requests, and related tasks
Capture efficiencies, cost offsets, and savings within the Architecture team to support competitive advantage
Provide oversight and leadership for cybersecurity projects and initiatives using cost-benefit and risk management analysis
Support enterprise and business initiatives that drive technological evolution across supported programs
Support the organization’s vision, strategy, and goals
Business travel as needed, up to 10%

Requirements

Active and transferable U.S. government issued security clearance required prior to start; U.S. citizenship required (only U.S. citizens are eligible for a security clearance)
Security Clearance Type: Secret
Security Clearance Status: Active and existing security clearance required on day 1
Typically requires a STEM degree and minimum 8 years of prior relevant experience
Experience in Cyber / Systems Security or Network Architecture / Technology
Experience understanding and implementing compliance regulations such as NISPOM, DAAPM, JAFAN, ICD, FAA, HIPAA, and/or other government regulations or requirements
Within six months of hire date, obtain and maintain a security professional certification commensurate with a DoD 8570.01-M IAM level III credential (CISSP, CISM, GSLC, or CCISO), if not already certified

Technologies

CISSP, CISM, GSLC, CCISO, DoD 8570.01-M IAM level III
NISPOM, DAAPM, JAFAN, ICD, FAA, HIPAA
TOGAF, DoDAF
SharePoint, MS Project, JIRA, Azure DevOps
SIEM, Kubernetes, Rancher, Docker
VMWare, Nutanix, endpoint security
Security information and event management, vulnerability management, encryption, antivirus

Preferred Qualifications

Experience with change management or architectural governance
Ability to tailor technical discussions to various audiences; ability to create security whitepapers and concepts of operations
Experience with information security COTS applications (endpoint security, SIEM, vulnerability management, encryption, antivirus)
Experience with project management and collaboration tools (SharePoint, MS Project, JIRA, Azure DevOps)
Experience with SIEM tools
Understanding of enterprise architectural framework methodologies (TOGAF, DoDAF)
Familiarity with containerization technologies (Kubernetes, Rancher, Docker)
Experience with virtualization (VMWare, Nutanix)
Familiarity with cloud architecture, service categories, and deployment models

Benefits

Medical, Dental, Vision
Life insurance
Short-term disability, Long-term disability
401(k) match
Flexible spending accounts
Flexible work schedules
Employee assistance program
Employee Scholar Program
Parental leave
Paid time off, Holidays

Compensation: USD 107,500 - 204,500 per year

Location: Tucson, AZ, United States (onsite)

Travel: Up to 10%

Relocation: Not eligible (relocation assistance not available)

View full job page →

1mo ago

Information Systems Security Engineer (ISSE)

Abacus Technology Hanscom AFB, MA

Hanscom AFB, MA

1mo ago Closed

Full time Assessment And Authorization Cism CISSP

This position is no longer accepting applications (closed Oct 27, 2026).

Job Description

Abacus Technology is seeking an Information Systems Security Engineer (ISSE) to deliver cyber and information assurance support for the C3I&N Directorate at Hanscom AFB.

Responsibilities

Coordinate Assessment and Authorization (A&A) documentation activities.
Support IA architecture efforts, including assistance with design, development, implementation, and integration.
Act as PMO expert for information assurance security protections and associated requirements.
Support development of Security Plan of Actions and Milestones (POA&M) mitigations by tracking timely completion of POA&M corrective actions.
Conduct technical and nontechnical reviews and observe audits as needed to support development and testing efforts.

Requirements

12+ years of experience in cybersecurity and information assurance, including at least 5 years in a DoD environment.
Bachelor’s degree in a related field.
Must hold CISSP or CISM certification.
Experience with security systems engineering spanning hardware, software, operating systems, and application solutions.
Knowledge of security features and/or vulnerabilities across various operating systems.
Experience with IA vulnerability testing.
Experience supporting US Government contract proposals as an IA/security engineering subject matter expert, including implementation of DoD and Federal IA A&A processes.
Knowledge of IA controls and the ability to develop and maintain related A&A documentation in accordance with the Risk Management Framework (RMF).
Experience with SAP/SAR.
Must be a US citizen and hold a current Top Secret clearance.

Technologies

CISSP
CISM
Risk Management Framework (RMF)
SAP/SAR

Location: Hanscom AFB, MA (onsite)

View full job page →

1mo ago

Sr IT Security Engineer

American Medical Association Chicago, IL 🇺🇸 Remote

Chicago, IL

1mo ago Closed

$116k - $151k/yr Full time Application Security Cisa Cism

This position is no longer accepting applications (closed Oct 26, 2026).

Job Description

American Medical Association’s Infrastructure Ops team is hiring a Sr IT Security Engineer for a remote role based in Chicago, IL. In this position, you will help protect enterprise systems through security and cyber threat intelligence, while designing and maintaining security platforms and operational solutions.

You will work across security programs, day-to-day security technologies and processes, and incident detection and response, with clear reporting for leadership, audit compliance, and continuous improvement across cloud and hybrid environments.

Key Responsibilities

Research, design, and advocate for new security technologies, architectures, and security products that meet enterprise and customer, partner, and vendor security requirements.
Plan, document, and execute enterprise-wide security programs, including vulnerability identification and testing and a network scanning framework for public and private networks and related technologies.
Configure and troubleshoot vulnerability assessment tools and endpoint solutions, perform scans, identify and research threats, and summarize results and corrective actions where appropriate.
Partner with IT, compliance, audit, and others to ensure applications and infrastructure are developed, implemented, and administered in line with IT security standards and regulatory audit compliance.
Communicate IT security policies and procedures to management and end users across businesses.
Collect and analyze defined metrics, including security dashboards and training results, and report findings to leadership.
Develop and deliver information security awareness training, including phishing simulations and risk-based training content for high-risk users.
Identify, collect, and organize credible threat intelligence and subject matter related to current and emerging threats using available tools, applications, and open-source information.
Define and document application security standards for developers and ensure compliance with applicable security controls when standards are used.
Design, lead, and project manage the development and configuration of security tools and automation based on defined use cases.
Proactively monitor, analyze, block, and respond to malware and emerging threats; act as a technical point of contact during and after incidents, including digital forensics procedures.
Conduct operational threat hunting exercises to proactively find incidents in the AMA environment.
Perform threat modeling and risk assessments using standard security frameworks for cloud services.
Monitor and audit on-premise and cloud networks and systems, including service changes.
Document incident response procedures and support management communications during incidents.
Assist in management of security services providers.
Research new threats, attacks, and risks to infrastructure and software.
Define and document operating procedures for incident identification, investigation, and response.
Work with business teams to identify and address data security risks in business processes.
Analyze and recommend improvements to the organization’s security posture within cloud and hybrid environments and associated services and configurations.
Improve security reporting by coordinating vulnerability management, penetration testing, and infrastructure compliance.
Create or update operational processes and procedures for security operations, incident management, and code development.

Qualifications

Bachelor’s degree required in Information Security, Engineering, Computer Science, or a related field.
Demonstrated progression toward one or more security certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), CISSP/CISA, or CISM.
5+ years of Security Operations experience, including cyber incident investigations.
Strong understanding of network and host-based security applications and tools.
Exposure to enterprise web application programming and Application Security (AppSec).
Knowledge of browser security controls, web application security frameworks, and authentication infrastructures including SAML and OAUTH, plus related IT security and IT risk context across infrastructure, endpoints, networks, databases, and systems.
Understanding of cloud networking concepts and architecture to develop new designs and security strategies across infrastructure, platform, and software as a service.
Excellent written and verbal communication skills, including translating technical concepts for business leaders and users with clear emphasis on threat urgency and incident priority.
Ability to respond to security incidents promptly and independently under time pressure.
Excellent analytical, organizational, and communication skills, including demonstrated ability to facilitate cross-functional teams.
Experience with continuous improvements and agile methodology.

Technologies

Firewalls
SIEM
Data Loss Prevention
Web Application Firewalls
Application Security Testing
VPN
SAML
OAUTH
GIAC Certified Incident Handler (GCIH)
GIAC Certified Intrusion Analyst (GCIA)
CISSP
CISA
CISM

Location: Chicago, IL (remote). Compensation: USD 115,523 to 150,972 per year.

View full job page →

1mo ago

Systems Cybersecurity Engineer

Odyssey Systems Consulting Group, Ltd. Colorado Springs, CO

Colorado Springs, CO

1mo ago Closed

$130k - $165k/yr Full time Casp+ Cciso Cism

This position is no longer accepting applications (closed Oct 23, 2026).

Job Description

Lead with mission-focused systems cybersecurity expertise at Peterson Space Force Base supporting end-to-end integration across the system lifecycle.

Responsibilities

Perform risk assessment and vulnerability management by identifying, evaluating, and prioritizing security vulnerabilities across the organization’s digital infrastructure.
Implement and maintain technical defenses to protect critical assets and secure infrastructure.
Continuously monitor for potential threats and respond to security incidents to minimize impact and restore operations.
Deliver security training and awareness for employees and customers, including required Government Training for DET 5 and additional DET 5-specific training via the myLearning page.
Support cybersecurity compliance activities, including Annual Control Validations and cyber risk assessments.
Manage third-party risk by securing vendors and partners to reduce potential vulnerabilities.
Maintain compliance with DoD Manual 8140.03 / 8570.01-M baseline certification requirements for Information Assurance Technical (IAT) Level III or Information Assurance Management (IAM) Level II/III (for example: CISSP, CASP+, CISM).
Register, review, and maintain system Ports, Protocols, and Services Management (PPSM) data.
Ensure boundary defenses (firewalls, routers) are configured according to DISA PPSM Category Assurance List (CAL) requirements.
Identify and implement process improvements within the Agile Kanban construct to streamline the RMF lifecycle and reduce bottlenecks in artifact collection and eMASS package processing.
Evaluate Engineering Change Proposals (ECPs) at the Engineering Review Board (ERB) level.
Conduct early-stage Security Impact Analysis (SIA) to identify RMF control implications and ensure technical requirements for NCMC-ITW/AA and Legacy Space systems are met before development begins.

Requirements

US Citizen
Must have and be able to maintain a Top-Secret Security Clearance
DoD IAM Level I (CAP, CND, Cloud+, GSLC, Security+ CE, CISSP)
High School Diploma
Minimum experience/certification alignment:
- 15 years directly related experience with proper certifications as described in the functionally aligned job description, 8 of which must be in the DoD; OR
- BA/BS degree with 12 years experience in the respective technical/professional discipline, 5 of which must be in the DoD; OR
- MA/MS degree with 10 years experience in the respective technical/professional discipline, 5 of which must be in the DoD
Advanced knowledge and recognized ability to be considered an expert in the technical/professional field.
Ability to perform tasks and oversee efforts of junior and mid-level personnel.
Comprehensive understanding and ability to apply associated standards, procedures, and practices within the area of expertise.

Technologies

Agile Kanban
eMASS
RMF
PPSM
DISA PPSM Category Assurance List (CAL)
DoD Manual 8140.03
8570.01-M
CISSP
CASP+
CISM
CAP
CND
Cloud+
GSLC
Security+ CE
CASP+ CE
CCISO

Preferred Experience

DoD IAM Level II/III (CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO)

Additional Information

Location: Peterson SFB, CO
Work model: Hybrid; some telework allowed, subject to change per customer discretion
Travel: up to 25%
#LI-JC1
Salary: USD 130,000 - 165,000 per year

About the Role

Senior system cybersecurity subject matter expertise for a Peterson Space Force Base environment.
Full integration of cybersecurity across the system lifecycle from acquisition through sustainment and compliance assessment.

Odyssey Systems Consulting Group, Ltd.

Technical, engineering, and integration company serving the warfighting ecosystem (airborne integration, ISR, C2, and warfighter readiness).
Integrates layered defense systems across equipment, technology, services, and operations.
Supports defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality.
Focuses on contract execution, organizational performance, and a workplace built on employee care.

View full job page →

Cism Engineer Jobs

Senior Information Systems Security Engineer (ISSE) II

Information Systems Security Engineer (ISSE)

Sr IT Security Engineer

Systems Cybersecurity Engineer

Get Cism Engineer Jobs alerts