System Security Plan

System Security Plan Engineer Jobs

5 jobs found

1mo ago

Information Systems Security Engineer

Base-2 Solutions United States

United States

1mo ago Closed

Full time Cyber Security Cybersecurity Tools Identity and Access Management

This position is no longer accepting applications (closed Oct 29, 2026).

Job Description

Base-2 Solutions is hiring an Information Systems Security Engineer (ISSE) to help protect national defense and mission-critical systems as part of an on-site team in the United States. This role combines security engineering, risk management, and cybersecurity compliance work, with opportunities to drive documentation, testing, and certification and accreditation support. You will work within established policy and frameworks while collaborating across system, software, and network disciplines.

Responsibilities

Develop, implement, and maintain security solutions for complex systems to support confidentiality, integrity, and availability.
Perform system security analysis, risk assessments, and vulnerability assessments to identify, evaluate, and mitigate risk.
Contribute to security architecture and system security engineering artifacts aligned to NIST, DoD, and IC policies and guidance.
Collaborate with system architects, software engineers, and network engineers to incorporate security requirements into system design.
Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), and Risk Management Framework (RMF) documentation.
Support continuous monitoring and compliance with security standards such as NIST SP 800-53, ICD 503, CNSS, and related requirements.
Recommend improvements to system security posture and address security incidents as they arise.
Participate in security testing, evaluation, and certification and accreditation (C&A) activities.
Interface with government customers and stakeholders to communicate technical information and security strategy.

Required Qualifications

Experience with cybersecurity frameworks and standards including NIST SP 800-53, RMF, ICD 503, CNSS, and DoD STIGs.
Hands-on experience with security tools such as ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, and McAfee ePO.
Experience with security technologies including firewalls, IDS/IPS, SIEMs, VPNs, PKI, and multi-factor authentication.
Experience producing and maintaining system security documentation: SSPs, POA&Ms, SARs, and Security Control Traceability Matrix (SCTM).
Experience with Linux, Unix, Windows, and virtualization technologies such as VMware and Hyper-V.
Experience with cloud platforms including AWS, Azure, and Google Cloud, with a focus on cloud security.
Knowledge of encryption protocols and technologies such as TLS/SSL, IPsec, VPN, and PKI.
Experience with security testing tools including Nmap, Metasploit, Burp Suite, and Kali Linux.
Scripting and automation experience with Python, PowerShell, and Bash.
Knowledge of SDLC, software assurance, and secure coding practices.
Experience collaborating and tracking issues using tools such as JIRA, Confluence, and ServiceNow.
Certifications including CISSP, CAP, CEH, Security+, AWS Security Specialty, or equivalent.

Benefits

Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
Employee referral bonuses up to $10,000 per hired referral.
Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).
100% company-paid medical premiums for employees and eligible dependents, with plan options through CareFirst, Kaiser, and UnitedHealthcare (PPO, POS, HMO, and HSA-compatible plans).
100% company-paid dental premiums for employees and eligible dependents.
100% company-paid vision premiums for employees and eligible dependents.
100% company-paid premiums for short-term disability and long-term disability.
100% company-paid premiums for accidental death & dismemberment (AD&D).
100% company-paid life insurance up to $200,000.
401(k) with immediate vesting: 4% company match plus 4% non-elective contribution (8% total), with pre-tax and Roth options.
Up to 20 days of flexible paid time off (PTO) and 11 paid floating holidays.
Flexible work schedules including flex time and compressed work periods (contract and project-dependent).

Location: Annapolis Junction, MD (On-Site). Shift: First. Requisition ID: 4914. Referral eligibility: Eligible. U.S. citizenship required: Yes. Required security clearance: Active Top Secret/SCI with Full Scope Polygraph.

View full job page →

1mo ago

GXVM System Information System Security Engineer (ISSE)

Bowhead Crane, IN

Crane, IN

1mo ago Closed

$100k - $115k/yr Full time Information Security Information Technology (IT) InfoSec

This position is no longer accepting applications (closed Oct 22, 2026).

Job Description

Bowhead is seeking a GXVM System Information System Security Engineer (ISSE) to provide onsite cybersecurity and program support in Crane, IN supporting the Program Office Technical Lead at NSWC Crane.

Responsibilities

Embed cybersecurity requirements into SSP system designs to support system acquisition, development, test, and sustainment
Conduct requirements analysis and support the design, development, implementation, and integration of cybersecurity system architectures for SSP non-enterprise systems
Apply cybersecurity engineering to deliver cyber resiliency and security capabilities for SSP systems
Select and evaluate design alternatives based on mission impact and cybersecurity posture risk
Develop and apply requirements for large-scale or service-specific pilot projects
Support the Program Office Technical Lead by identifying issues and action items and participating in ISSE discussions as needed
Deliver customer interaction support to Program Offices and associated contractors via teleconferences and on-site meetings
Coordinate and collaborate with stakeholders through assessments, SME input to proposals, technical interchange meetings, status teleconferences, email correspondence, and other meetings as required
Develop technical presentations and provide comments on technical content
Create System Security Plans (SSPs) detailing the security controls implemented for each information system
Support SSP programs to develop and maintain lifecycle plans
Evaluate performer deliverables and presentations

Requirements

Bachelor of Science in Electrical Engineering, Computer Engineering, Cybersecurity, or equivalent
5+ years of relevant cybersecurity experience
CompTIA Security+ or equivalent certification
Current and valid Operating System/Computing Environment (OS/CE) certifications or training for Windows and Red Hat Enterprise Linux (RHEL)
Proficiency with RHEL
Ability to communicate effectively via oral and written communication in American English with leadership and stakeholders
Ability to collaborate with large, highly competent technical teams
Strategic high-level thinking
Experience planning initiatives involving large-scale, networked systems
United States citizenship required to obtain clearance
Willing and able to travel 40% or more

Technologies

Red Hat Enterprise Linux (RHEL)
Windows

Preferred Qualifications

Prior US military experience
10+ years of relevant cybersecurity experience
Graduate degree in Cybersecurity or equivalent
Active Top Secret Clearance

Security Clearance Required

Must be able to obtain a security clearance at the Secret level
Candidates with an Active Top Secret clearance are preferred
US Citizenship required for Secret clearance at this location

Physical Demands

Ability to lift 15 to 25 pounds
Ability to stand and walk for prolonged periods
Ability to twist, bend, and squat periodically

Location: Crane, IN (onsite)

Salary: USD 100,000 - 115,000 per year

View full job page →

3mo ago

Information Systems Security Engineer (ISSE), Journeyman

CGI Group, Inc. Arlington, VA

Arlington, VA

3mo ago Closed

$100k - $150k/yr Full time Information Security Information Systems InfoSec

This position is no longer accepting applications (closed Aug 29, 2026).

Job Description

The Information Systems Security Engineer (ISSE) role at CGI Group, Inc., based in Arlington, VA with hybrid work options, involves designing, implementing, and managing security solutions for information systems, ensuring alignment with security standards and conducting risk assessments. The position offers a salary range of USD 100,000 to 150,000 per year.

Responsibilities

Security architecture design: Develop and deploy security architectures for information systems, spanning hardware, software, and network layers.
Risk management: Identify and evaluate security risks, formulate mitigation strategies, and implement controls to remediate vulnerabilities.
Security compliance: Verify that systems adhere to applicable security policies, regulations, and standards, including NIST, RMF, and ICD 503.
Vulnerability management: Perform vulnerability scans, analyze findings, and propose remediation measures.
Security documentation: Create and maintain security documentation such as system security plans, security assessment reports, and risk management plans.
Collaboration and communication: Collaborate with system administrators, network engineers, software developers, and other stakeholders to integrate security into the system development lifecycle.
Continuous monitoring: Engage in continuous monitoring activities to sustain security posture and ensure ongoing compliance.
Incident response: Contribute to incident response efforts, investigating security incidents, analyzing malware, and conducting forensic analysis.

Requirements

Education and experience: Bachelor’s degree and 2 to 5 years of related experience.
Security clearance: Active TS/SCI clearance with polygraph.
Technical expertise: Solid understanding of security principles, technologies, and best practices.
RMF: Experience applying the Risk Management Framework to information systems.
Security architecture: Knowledge of secure system design principles and experience crafting secure architectures.
Security controls: Familiarity with a range of security controls and their implementation.
Vulnerability assessment: Experience using vulnerability scanning tools and methodologies.
Security documentation: Ability to create and maintain security documentation.
Communication: Excellent verbal and written communication skills to collaborate with diverse teams.
Problem solving: Strong analytical and problem-solving abilities to address complex security challenges.
Certifications: CISSP, CISM, CAP, or other recognized security certifications.

Technologies

RMF
NIST
ICD 503

Benefits

Competitive compensation
Comprehensive insurance options
Matching contributions through the 401(k) plan and the share purchase plan
Paid time off for vacation, holidays, and sick time
Paid parental leave
Learning opportunities and tuition assistance
Wellness and well-being programs

View full job page →

3mo ago

Cybersecurity Systems Engineer/Information Systems Security Engineer (ISSE) - TS/SCI with Polygraph

General Dynamics Information Technology Washington, DC

Washington, DC

3mo ago Closed

$164k - $213k/yr Full time Information Security InfoSec ISSM

This position is no longer accepting applications (closed Aug 28, 2026).

Job Description

General Dynamics Information Technology offers an award winning culture of innovation and a military friendly workplace supported by an AI powered career planning tool, a dedicated internal mobility team, comprehensive benefits and wellness programs, a 401K with company match, competitive pay and paid time off. This on site opportunity in Washington, DC carries a salary range of USD 164,382 to 212,750 per year and requires an active TS/SCI clearance with polygraph. The role centers on cybersecurity systems engineering and leading RMF A and A activities, documentation, and accreditation for government systems.

Benefits

Career growth aided by an AI driven tool that maps learning opportunities and next steps
Internal mobility team dedicated to helping you reach your professional goals
Comprehensive benefits and wellness packages, plus 401K with company match, and competitive pay with paid time off
Award winning culture that emphasizes innovation and a military friendly environment

Responsibilities

Lead Accreditation and Authorization reviews by group level ISSMs and Security Controls Assessors
Document security control implementations and compile RMF and ICD 503 artifacts to support A&A efforts
Develop a clear understanding of project architectures to write Systems Security Plans and CONOPS
Collaborate with system owners, project managers, and engineers to prepare Contingency Plans, General User Guides, Privileged User Guides, and Standard Operating Procedures
Capture and document POA&M implementations and mitigations with the necessary artifacts
Coordinate with contractor and customer personnel to gather A&A content and navigate the customer process to achieve ATD, IATT, and ATO for assigned systems
Monitor A&A projects and articulate status across all stakeholder levels
Support audit liaison activities and compliance oversight to strengthen RMF adherence
Perform technical content reviews and edits as part of the Annual ISCM and OA Strategy Plan Update
Conduct updates to the control volatility section of the plan in light of emerging threats and evolving guidance
Provide audit liaison support for internal and external audits and data calls, delivering actionable recommendations

Requirements

Education and Experience: Technical training, certifications or degree plus 10 years of related work
Certifications: DoD 8570.01-M IASAE Level II
Security Clearance: Active TS/SCI with Polygraph
Location: On customer site

Technologies

RMF
ICD 503 Security Accreditation
ISCM

View full job page →

3mo ago

Staff/Sr. Principal Cybersecurity Systems Engineer (CSE)

Northrop Grumman Oklahoma City, OK

Oklahoma City, OK

3mo ago Closed

$128k - $239k/yr Full time Senior Application Security Cybersecurity Tools

This position is no longer accepting applications (closed Aug 25, 2026).

Job Description

Northrop Grumman is seeking a Staff or Senior Principal Cybersecurity Systems Engineer for the B-2 program in Oklahoma City, onsite. The role focuses on assessing software and hardware for vulnerabilities, developing automation for cybersecurity processes, and guiding security layout, architecture, and verification across the system lifecycle. A current DoD Secret clearance is required to qualify for this position.

Responsibilities

Solve complex technical problems involving low level cybersecurity concepts.
Demonstrate technical leadership in cybersecurity concepts and tasks.
Assess results from software static code analysis.
Complete Cybersecurity Impact Appraisals and Evaluations on hardware projects.
Generate and maintain artifacts for Air Force authorization decisions.
Perform system vulnerability scans using ACAS and STIGs.
Conduct manual STIG / SRG verifications on diverse equipment, including collecting and evaluating findings.
Perform system categorization based on impact analysis.
Develop artifacts required for a RMF package: System Security Plan, Continuous Monitoring Plan, Risk Assessment Report, Security Control Traceability Matrix, Plan Of Actions & Milestones, etc.
Participate and lead in systems engineering events across the system development lifecycle.
Participate in Systems Engineering Technical Review events across the lifecycle including PDR, CDR, SRR, TRR.
Implement, review and assess cybersecurity system requirements verification and validation methods.

Requirements

Basic qualifications for Staff Cyber Systems Engineer / Level 5

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Systems Engineering, Cybersecurity Engineering, or another STEM field with a minimum 12 years of relevant experience, OR 10 years with a Master’s degree, OR 8 years with a PhD.
Demonstrated experience in cybersecurity vulnerability assessments and evaluation.
Knowledge of NIST 800-53, NIST 800-171, NSS/CSA PM 9-12 and JSIG.
Current or active DoD Secret clearance.
Current CISSP or Security+ CE certificate or IAM III certification or higher, or ability to attain Security+ CE certificate within 6 months.
Ability to be program cleared.

Basic qualifications for Senior Principal Cyber Systems Engineer / Level 4

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Systems Engineering, Cybersecurity Engineering, or another STEM field with a minimum 8 years of relevant experience, OR 6 years with a Master’s degree, OR 4 years with a PhD.
Demonstrated experience in cybersecurity vulnerability assessments and evaluation.
Knowledge of NIST 800-53, NIST 800-171, NSS/CSA PM 9-12 and JSIG.
Current or active DoD Secret clearance.
Current Security+ CE certificate or IAM II certification or higher, or ability to attain Security+ CE certificate within 6 months.
Ability to be program cleared.

Preferred qualifications

Program cleared.
Current CSSLP, CISSP or other IAM III certification per DoD 8140.

Technologies

ACAS
STIGs

Compensation

Primary level salary range: $127,900.00 - $191,900.00

Secondary level salary range: $159,400.00 - $239,000.00

View full job page →

System Security Plan Engineer Jobs

Information Systems Security Engineer

GXVM System Information System Security Engineer (ISSE)

Information Systems Security Engineer (ISSE), Journeyman

Cybersecurity Systems Engineer/Information Systems Security Engineer (ISSE) - TS/SCI with Polygraph

Staff/Sr. Principal Cybersecurity Systems Engineer (CSE)

Get System Security Plan Engineer Jobs alerts