Information Systems Security Engineer

Parsons is looking for an Information Systems Security Engineer to support a Department of Defense (DoD) system in Texas. In this role, you will help protect the system by mitigating vulnerabilities, supporting compliance requirements, and maintaining an effective security posture in collaboration with the ISSO.

The position focuses on recurring vulnerability scanning, DISA STIG validation, POA&M remediation execution, and documentation support aligned to NIST RMF and NIST SP 800-53.

Key Responsibilities

• Run monthly System Security Plan (SSP) ACAS vulnerability scans and perform quarterly ACAS Security Technical Implementation Guide (STIG) / SCAP scans.
• Complete monthly SSP patch version upgrades to help ensure systems remain secure and compliant.
• Conduct annual manual STIG checks for system components that cannot be scanned automatically.
• Serve as the primary technical remediator for POA&M findings, carrying out remediation tasks based on Jira tickets generated by the ISSO.
• Support the ISSO with investigating and responding to security alerts and logs.
• Maintain and update critical security documentation, including network/system diagrams, Hardware/Software (HW/SW) lists, and Ports, Protocols, and Services Management (PPSM) documentation.
• Assist the ISSO with drafting, updating, and maintaining NIST RMF documentation in accordance with NIST SP 800-53 guidance.

Required Qualifications

• Active TS/SCI.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical field (or equivalent years of relevant work experience).
• 4+ years of hands-on experience in cybersecurity engineering, systems administration, or a related role within a DoD or federal environment.
• Active baseline Information Assurance Technical (IAT) Level II or Level III certification (examples include CompTIA Security+ CE, CASP+ CE, CISSP, or equivalent).
• Hands-on experience using Assured Compliance Assessment Solution (ACAS) / Tenable Nessus for vulnerability and compliance scanning.
• Strong background applying and validating DISA STIGs across operating systems (including Windows and Linux) and network devices.
• In-depth knowledge of NIST Risk Management Framework (RMF) and NIST SP 800-53 security controls.
• Experience with patch management and system upgrades in a secure, air-gapped, or highly regulated environment.
• Experience using Jira (or similar ticketing systems) for tracking workflows and technical remediation tasks.
• Ability to translate technical vulnerabilities into actionable remediation steps.
• Excellent communication skills and the ability to work collaboratively with the ISSO and other stakeholders.
• Advanced scripting skills (including PowerShell, Python, or Bash) to automate STIG application and compliance checks.

Technologies

• Assured Compliance Assessment Solution (ACAS)
• Tenable Nessus
• ACAS Security Technical Implementation Guide (STIG)
• SCAP
• NIST Risk Management Framework (RMF)
• NIST SP 800-53
• DISA STIGs
• Jira
• PowerShell
• Python
• Bash
• OpenSearch
• Elasticsearch
• Visio

Desired Skills

• Advanced degree preferred.
• Experience configuring and analyzing logs within OpenSearch, Elasticsearch, or similar SIEM/log analysis tools.
• Familiarity with DoD PPSM processes and registry requirements.
• Operating System/Computing Environment (CE) certifications (examples include Microsoft Certified: Azure Administrator and Red Hat Certified System Administrator).
• Experience developing network and rack diagrams in Visio.

Location and Clearance

• Location: Texas (onsite)
• Security Clearance Requirement: An active Top Secret SCI security clearance is required.

Salary and Benefits

Salary range: USD 88,400 - 154,700 per year.

• medical, dental, vision
• paid time off
• 401(k)
• life insurance
• flexible work schedules
• holidays

Competitive Benefit Offerings

• Financial Wellness
• Work Life Harmony
• Career Development
• Veteran Support
• Mind & Body
• Health