Information Systems Security Engineer (ISSE)
Job Description
Entarian is seeking an Information Systems Security Engineer (ISSE) to support NIWC Atlantic’s Expeditionary Enterprise Systems and Services (E2S2) Division in Charleston, SC.
Responsibilities
- Integrate cybersecurity requirements into system architecture, engineering designs, interface specifications, and technical documentation across the lifecycle
- Engineer, implement, and validate security controls in alignment with NIST RMF, NIST SP 800-53, CNSSI 1253, and DoD cybersecurity guidance
- Perform architecture reviews, vulnerability assessments, threat analysis, risk assessments, attack surface analysis, and mitigation planning
- Participate in architecture reviews, design reviews, technical interchange meetings, and configuration control boards to build cybersecurity in from the start
- Develop and maintain technical cybersecurity documentation such as SSPs, control implementation statements, security and network diagrams, interface documents, and engineering analyses
- Support RMF activities including SAPs, SARs, POA&Ms, continuous monitoring documentation, and other authorization artifacts
- Identify cybersecurity gaps and architectural risks and recommend engineering solutions to strengthen the security posture
- Collaborate with engineering teams to establish and maintain secure configuration baselines
- Evaluate system changes, technology insertions, and architecture modifications for cybersecurity impact and accreditation implications
- Support vulnerability management by analyzing scan results, prioritizing findings, planning remediation, and validating corrective actions
- Support integration, testing, verification, validation, and accreditation activities to confirm security controls function as intended
- Support continuous monitoring by assessing control effectiveness and recommending improvements
- Ensure secure integration of COTS, GOTS, open-source, cloud-based, and custom-developed technologies
- Provide guidance on secure design, defense-in-depth, Zero Trust principles, and cybersecurity best practices
- Prepare technical reports, engineering recommendations, risk assessments, and executive briefings
Requirements
- Active Top Secret clearance
- Bachelor’s degree (ABET-accredited) in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in Computer Science; or a related discipline
- Minimum 3 years of experience developing, implementing, and maintaining cybersecurity policies, including Assessment and Authorization (A&A) activities
- DoD 8570/8140 Level I certification in IAM, IAT, or IASAE
Technologies
- NIST RMF, NIST SP 800-53, CNSSI 1253
- ACAS, Nessus, SCAP
- PowerShell, Python, Ansible, Terraform, Kubernetes, IaC
- DoD Enterprise DevSecOps Reference Design, Platform One, DevSecOps
- Zero Trust
Desired Qualifications
- Experience supporting DoD, Intelligence Community, or classified government systems
- Demonstrated experience engineering NIST RMF controls and producing RMF artifacts
- Strong understanding of secure systems engineering, defense-in-depth, Zero Trust architectures, and large-scale distributed systems
- Experience with operating systems, networking, virtualization, cloud, IAM, encryption, and cybersecurity technologies
- Experience conducting vulnerability assessments using ACAS, Nessus, SCAP, or similar tools
- Experience supporting cloud security, hybrid environments, containers, Kubernetes, or DevSecOps pipelines
- Familiarity with IaC and scripting (PowerShell, Python, Ansible, Terraform), and the DoD Enterprise DevSecOps Reference Design or Platform One
- Active security certifications (e.g., Security+, CISSP, CASP+, CCSP, GIAC, or IASAE)
- Strong technical writing and verbal skills to communicate complex cybersecurity concepts to both technical and leadership audiences
Salary
- USD 103,000 - 121,000 per year
Location: Charleston, SC 29404 (onsite)