Information Systems Security

Information Systems Security Engineer Jobs

3 jobs found

Today

Information Systems Security Engineer (ISSE)

General Dynamics Information Technology Fort Belvoir, VA

Fort Belvoir, VA

Today

$108k - $146k/yr Full time Information Security Information Systems Security InfoSec

Apply Now

Job Description

General Dynamics Information Technology is seeking a mid-level Information Systems Security Engineer (ISSE) to support Assessment and Authorization (A&A) and Continuous Monitoring (ConMon) efforts. In this role, you will help maintain RMF compliance across multi-level classification environments for DSMS, with responsibilities spanning security engineering support, documentation, and lifecycle-oriented security activities.

This position is based onsite in Fort Belvoir, VA. The likely salary range is USD 107,950 - 146,050 per year, with Secret clearance required and less than 10% travel.

What You’ll Do

Coordinate with other DSMS program teams to plan and create cybersecurity architecture and design documents for DSMS, ensuring compliance with DoD and other organizational IA policies and guidance.
Apply best practices when implementing security controls in an IS, including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques.
Develop cybersecurity architecture and design plans for communication and collaboration products, operating system platforms (servers and devices), management products, applications, and related security considerations for implementation.
Provide security engineering support for accreditation of DSMS Networks.
Integrate cybersecurity expertise into lifecycle management, including planning architecture and design management, migration and deployment, and system testing and implementation.
Research, develop, test, and document architectures and solutions for new cybersecurity technologies that improve information collaboration and cybersecurity capabilities for the program and its user base.
Develop and provide criticality analysis for logic-bearing system components (hardware, firmware, and software), including how components implement, protect, or introduce vulnerabilities to each function.
Develop and maintain mission criticality analysis, vulnerability assessments, risk assessments, and countermeasure implementation for Mission-Critical Functions, and ensure updated assumptions, rationale, results, supply chain risk information, and mitigations are available for Government review.
Prepare and submit Interim Authorization to Test (IATT) and Authority to Operate (ATO) requests, including Plans of Action and Milestones (PoAMs).
Develop, maintain, and coordinate required Body of Evidence (BoE) documentation for system assets.
Collaborate across Technical Services and Security Services teams, along with customer agency stakeholders, to support compliance.
Track workflow for lien remediation and resolution activities and enter updates in tracking tools.
Evaluate system change requests and assess system and organizational risks tied to modifications.
Execute ConMon activities within established timelines, including BoE collection and tracking tool updates.
Conduct recurring reviews of system state and security posture to confirm secure operation and implementation of information systems security policies and procedures.
Recommend security control implementations and identify countermeasures or mitigating controls where needed.
Respond to requests and queries for security information and reports.
Support investigations of security incidents and provide reporting as required.
Assist with communication, implementation, and enforcement of security policies and plans for data, applications, hardware, and telecommunications systems.
Advise stakeholders on information assurance standards, dependencies, and emerging security technologies.
Use Enterprise Security Services tools (including Trellix and ACAS) to track and remediate vulnerabilities and compliance deficiencies.

Required Qualifications

Education: Bachelor of Arts or Bachelor of Science
Experience: 2+ years of related experience
Security Clearance: Secret clearance required
Citizenship: U.S. Citizenship Required
Travel: Less than 10%

Technologies and Tools

Trellix
ACAS
Plans of Action and Milestones (PoAMs)
Body of Evidence (BoE)

Benefits

401K with company match
Comprehensive health and wellness packages
Internal mobility team dedicated to helping you own your career
Professional growth opportunities including paid education and certifications
Cutting-edge technology you can learn from and apply to solve real world problems

Additional Job Details

Location: Fort Belvoir, Virginia (Onsite Workplace)
Requisition Number: RQ229469
Category: Cyber and IT Risk Management
Requisition Type: Regular
Public Trust: None
Work Requirements: On Customer Site; travel less than 10%; years of experience may vary based on technical training, certification(s), or degree

Identity Verification Process: During virtual interviews, you are expected to be on camera. The company may take your picture to verify your identity and prevent fraud. You authorize the collection, processing, and use of biometric data for identity verification and security purposes.

View full job page →

2d ago

Information Systems Security Engineer

Base-2 Solutions United States

United States

2d ago

Full time Cyber Security Cybersecurity Tools Identity and Access Management

Apply Now

Job Description

Base-2 Solutions is hiring an Information Systems Security Engineer (ISSE) to help protect national defense and mission-critical systems as part of an on-site team in the United States. This role combines security engineering, risk management, and cybersecurity compliance work, with opportunities to drive documentation, testing, and certification and accreditation support. You will work within established policy and frameworks while collaborating across system, software, and network disciplines.

Responsibilities

Develop, implement, and maintain security solutions for complex systems to support confidentiality, integrity, and availability.
Perform system security analysis, risk assessments, and vulnerability assessments to identify, evaluate, and mitigate risk.
Contribute to security architecture and system security engineering artifacts aligned to NIST, DoD, and IC policies and guidance.
Collaborate with system architects, software engineers, and network engineers to incorporate security requirements into system design.
Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), and Risk Management Framework (RMF) documentation.
Support continuous monitoring and compliance with security standards such as NIST SP 800-53, ICD 503, CNSS, and related requirements.
Recommend improvements to system security posture and address security incidents as they arise.
Participate in security testing, evaluation, and certification and accreditation (C&A) activities.
Interface with government customers and stakeholders to communicate technical information and security strategy.

Required Qualifications

Experience with cybersecurity frameworks and standards including NIST SP 800-53, RMF, ICD 503, CNSS, and DoD STIGs.
Hands-on experience with security tools such as ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, and McAfee ePO.
Experience with security technologies including firewalls, IDS/IPS, SIEMs, VPNs, PKI, and multi-factor authentication.
Experience producing and maintaining system security documentation: SSPs, POA&Ms, SARs, and Security Control Traceability Matrix (SCTM).
Experience with Linux, Unix, Windows, and virtualization technologies such as VMware and Hyper-V.
Experience with cloud platforms including AWS, Azure, and Google Cloud, with a focus on cloud security.
Knowledge of encryption protocols and technologies such as TLS/SSL, IPsec, VPN, and PKI.
Experience with security testing tools including Nmap, Metasploit, Burp Suite, and Kali Linux.
Scripting and automation experience with Python, PowerShell, and Bash.
Knowledge of SDLC, software assurance, and secure coding practices.
Experience collaborating and tracking issues using tools such as JIRA, Confluence, and ServiceNow.
Certifications including CISSP, CAP, CEH, Security+, AWS Security Specialty, or equivalent.

Benefits

Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
Employee referral bonuses up to $10,000 per hired referral.
Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).
100% company-paid medical premiums for employees and eligible dependents, with plan options through CareFirst, Kaiser, and UnitedHealthcare (PPO, POS, HMO, and HSA-compatible plans).
100% company-paid dental premiums for employees and eligible dependents.
100% company-paid vision premiums for employees and eligible dependents.
100% company-paid premiums for short-term disability and long-term disability.
100% company-paid premiums for accidental death & dismemberment (AD&D).
100% company-paid life insurance up to $200,000.
401(k) with immediate vesting: 4% company match plus 4% non-elective contribution (8% total), with pre-tax and Roth options.
Up to 20 days of flexible paid time off (PTO) and 11 paid floating holidays.
Flexible work schedules including flex time and compressed work periods (contract and project-dependent).

Location: Annapolis Junction, MD (On-Site). Shift: First. Requisition ID: 4914. Referral eligibility: Eligible. U.S. citizenship required: Yes. Required security clearance: Active Top Secret/SCI with Full Scope Polygraph.

View full job page →

5d ago

Information Systems Security Engineer

CyberCore Technologies Columbia, MD

Columbia, MD

5d ago

$55k - $65k/yr Full time Data Security Information Security Information Systems Security

Apply Now

Job Description

Join CyberCore Technologies in Columbia, MD onsite as an Information Systems Security Engineer focused on meeting federal security requirements.

Responsibilities

Maintain compliance with DoD Information Assurance requirements applicable to the role
Support security engineering activities aligned to IAT Level II or IASAE Level 1 certification pathways
Perform information systems security work on programs and contracts of similar scope, type, and complexity (Federal Government experience is desirable)
Operate under an active TS/SCI security clearance with a current polygraph

Requirements

Active DOD 8570.01-M compliance with one of the following:
- Information Assurance Technical (IAT) Level II (Sec+)
- Information Assurance Systems Architect and Engineer (IASAE) Level 1 (CASP or CISSP)
Active TS/SCI security clearance with a current polygraph
Desirable: Experience as an ISSE on Federal Government programs and contracts of similar scope, type, and complexity
Education (one of the following paths):
- Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline from an accredited college or university
- OR Associate’s degree in the same fields from an accredited college or university, plus a technical certification such as Security+ and two (2) years of general IT experience
- OR High School Diploma/GED plus four (4) years of general IT experience, with at least one (1) year of information systems security experience
Minimum experience: 1 year

Salary & Location

Location: Columbia, MD (onsite)
Salary: USD 55,000 - 65,000 per year

Benefits

Health Insurance
Dental and Vision Insurance
Basic Life Insurance and Disability Insurance
Paid Holidays and Paid Time Off (PTO)
Paid Parental Leave
Tuition Reimbursement
401(k) plan with a company match

View full job page →

Information Systems Security Engineer Jobs

Information Systems Security Engineer (ISSE)

Information Systems Security Engineer

Information Systems Security Engineer

Get Information Systems Security Engineer Jobs alerts