Systems Security Engineering

Systems Security Engineering Jobs

4 jobs found

Today

Information Systems Security Engineer

Booz Allen Hamilton Reston, VA

Reston, VA

Today

$99k - $225k/yr Full time Cloud Security Assurance Cyber Security Identity and Access Management

Apply Now

Job Description

In this Information Systems Security Engineer role, you will design, implement, and evaluate security controls for cloud-hosted information systems across the full lifecycle. You will work with cloud, cybersecurity, risk management, and assessment and authorization stakeholders to convert security requirements into practical technical designs and to support authorization decisions.

Location and Work Model

Reston, VA (onsite)

Key Responsibilities

Engineer, implement, and assess security controls for cloud-hosted information systems in alignment with RMF, ICD 503, NIST guidance, and assessment and authorization requirements.
Translate security requirements, system architectures, data flows, and mission use cases into technical controls and documented security designs.
Develop and maintain A&A artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages.
Assess control implementation and effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure.
Apply security engineering practices including Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration.
Perform security engineering activities across the system lifecycle, including requirements analysis, architecture reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition.
Support security assessments, authorization decisions, control validation, audit readiness, and continuous-monitoring efforts.
Communicate security risks, decisions, compliance status, remediation plans, and technical recommendations to program stakeholders.

Required Qualifications

8+ years of experience in information systems security engineering, cloud security, or cybersecurity.
Experience engineering, implementing, and assessing security controls for cloud-hosted information systems using RMF, ICD 503, NIST guidance, and assessment and authorization processes.
Experience securing cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged-access capabilities.
Experience translating security requirements, system architectures, data flows, and mission use cases into implementable technical controls and security designs.
Experience developing and maintaining A&A artifacts, including system security plans, control implementation statements, security assessment plans, POA&Ms, continuous-monitoring plans, and evidence packages.
Experience applying Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices.
Experience performing security engineering across the system lifecycle.
Ability to assess control effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure.
TS/SCI clearance; willingness to take a polygraph exam.
Bachelor’s degree.

Technologies

RMF, ICD 503, NIST
Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability
Terraform, OCI Resource Manager, Ansible
SIEM, SOAR

Nice If You Have

Experience supporting classified, Government, or highly regulated information systems.
Experience with vulnerability management, configuration compliance, SIEM, SOAR, endpoint security, or cloud security posture management tools.
Experience with infrastructure as code and automated security configuration using Terraform, OCI Resource Manager, Ansible, APIs, or scripting.
Experience supporting authorization packages, control validation, audit readiness, remediation tracking, or continuous monitoring in an agency environment.
Strong written and verbal communication skills.
Associate or Professional level security, architecture, networking, or cloud operations certification.

Clearance Requirements

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. TS/SCI clearance is required.

Compensation

The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD).

Benefits

Health, life, disability, financial, and retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program acknowledging employees for exceptional performance and superior demonstration of company values
Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs
Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits

Identity Verification and Interview Requirements

As part of the hiring process, you will complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
You are expected to be on camera during interviews and assessments.
Booz Allen reserves the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

The use of artificial intelligence (AI) or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model Details

Onsite: work will primarily be performed full-time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

View full job page →

1d ago

Industrial Control System (ICS) Cybersecurity Engineer

ASRC Federal Albuquerque, NM

Albuquerque, NM

1d ago

Full time Industrial Control Systems Industrial Control Systems Security Industrial Cybersecurity

Apply Now

Job Description

The Industrial Control System (ICS) Cybersecurity Engineer will serve as an Information System Security Officer (ISSO) for KAFB owned and operated control systems in Albuquerque, New Mexico (onsite). The role provides technical leadership for cybersecurity and Risk Management Framework (RMF) activities while supporting the design, installation, commissioning, maintenance, and upgrades/modifications of control systems.

Responsibilities

Support implementation and maintenance of cyber security requirements within control networks.
Provide technical guidance for standardizing control systems and operational technology network architecture across the enterprise.
Specify control systems, instrumentation, and supporting equipment, and assist with procurement.
Provide RMF support to obtain and maintain Authority to Operate (ATO) approvals for multiple networks.
Create and maintain documentation and RMF artifacts in Enterprise Mission Assurance Support Services (eMASS).
Perform software assurance and risk assessments for the development of multiple software packages.
Conduct and review vulnerability and compliance scans for information system hardware and software; provide guidance for remediation of identified security flaws and configuration issues.
Review and monitor audit records for information systems.
Develop and maintain Standard Operating Procedures (SOP) and Work Instructions in accordance with Department of Defense and United States Air Force policies and procedures.
Oversee communications with Program Management, Information System Security Manager (ISSM), and On-Site Representative (OSR).
Direct remediation actions on security controls based on security assessment report findings and recommendations, working with Security Control Accessor (SCA) to remediate controls for compliance.
Administer mitigation for all identified POA&M weaknesses and ensure timely closure according to the mitigation plan.
Reduce or eliminate identified weaknesses, then coordinate the security authorization package with SCA for assessment.
Support configuration management processes, ensuring proposed changes are analyzed, tested, and approved before implementation.
Develop and test contingency plans and disaster recovery plans.
Create and manage Plans of Action and Milestones (POA&M) for identified weaknesses and vulnerabilities.
Oversee access control requirements, including privileged users, and ensure personnel receive required cybersecurity training.

Required Qualifications

At least three years of experience working in cybersecurity or a related field such as information technology or control systems management.
Prefer experience in a military environment, with familiarity with US Air Force cybersecurity guidance, rules, and regulations.
Bachelor’s degree or military-equivalent training in mechanical or electrical engineering, cybersecurity, information technology, or a closely related field.
Have or be able to obtain within six months a DoD 8570 (or 8140) IAT Level II certification.
Working knowledge of computer security architectures and implementation of security controls.
Ability to work independently with minimal supervision.
Excellent verbal and written communication skills.
Ability to pass a drug screen.
Must be a US citizen and currently possess or be able to obtain/maintain a US government-issued security clearance.
Proficiency with Microsoft Office 365 and Adobe Acrobat Pro.
Must maintain a valid US driver’s license.
Ability to perform repetitive physical tasks involving lifting at least 50 lbs.
Commitment to providing for and maintaining a safe working environment.

Technologies

Enterprise Mission Assurance Support Services (eMASS)
Risk Management Framework (RMF)
DoD 8570
DoD 8140
Microsoft Office 365
Adobe Acrobat Pro
BACnet
Host Based Security System (HBSS)
Niagara Workbench
Sustainment Management System (SMS) BUILDER
BUILDER Remote Entry Database (BRED)
Energy Management Control Systems (EMCS)
Fire Alarm Reporting Systems (FARS)
Utility Monitoring Control Systems (UMCS)

Benefits

Health care
Dental
Vision
Life insurance
401(k)
Education assistance
Paid time off including PTO
Holidays
Any other paid leave required by law

Desired Qualifications

Experience in a military environment, including familiarity with US Air Force cybersecurity guidance, rules, and regulations.
Expertise in advanced process control (APC), distributed control systems (DCS), programmable logic controllers (PLC), and supervisory control and data acquisition (SCADA).
Working knowledge of RMF package creation and maintenance.
Experience with eMASS for managing RMF Assessment and Authorization (A&A) activities.
Knowledge of Energy Management Control Systems (EMCS), Fire Alarm Reporting Systems (FARS), Utility Monitoring Control Systems (UMCS) utilizing BACnet protocols.
Familiarity with DoD RMF and eMASS Essentials.
Knowledge of Host Based Security System (HBSS).
Knowledge of Niagara Workbench software.
Familiarity or experience performing facility assessments and Real Property Inventory Equipment (RPIE) condition assessments using Sustainment Management System (SMS) BUILDER and BUILDER Remote Entry Database (BRED).
Experience working with data from geospatial databases.
Knowledge of construction management software, project closeout procedures, preventive maintenance, and construction and repair terminology and processes.

View full job page →

1d ago

Systems Cybersecurity Engineer

Odyssey Systems Consulting Group, Ltd. Colorado Springs, CO

Colorado Springs, CO

1d ago

$130k - $165k/yr Full time Casp+ Cciso Cism

Apply Now

Job Description

Lead with mission-focused systems cybersecurity expertise at Peterson Space Force Base supporting end-to-end integration across the system lifecycle.

Responsibilities

Perform risk assessment and vulnerability management by identifying, evaluating, and prioritizing security vulnerabilities across the organization’s digital infrastructure.
Implement and maintain technical defenses to protect critical assets and secure infrastructure.
Continuously monitor for potential threats and respond to security incidents to minimize impact and restore operations.
Deliver security training and awareness for employees and customers, including required Government Training for DET 5 and additional DET 5-specific training via the myLearning page.
Support cybersecurity compliance activities, including Annual Control Validations and cyber risk assessments.
Manage third-party risk by securing vendors and partners to reduce potential vulnerabilities.
Maintain compliance with DoD Manual 8140.03 / 8570.01-M baseline certification requirements for Information Assurance Technical (IAT) Level III or Information Assurance Management (IAM) Level II/III (for example: CISSP, CASP+, CISM).
Register, review, and maintain system Ports, Protocols, and Services Management (PPSM) data.
Ensure boundary defenses (firewalls, routers) are configured according to DISA PPSM Category Assurance List (CAL) requirements.
Identify and implement process improvements within the Agile Kanban construct to streamline the RMF lifecycle and reduce bottlenecks in artifact collection and eMASS package processing.
Evaluate Engineering Change Proposals (ECPs) at the Engineering Review Board (ERB) level.
Conduct early-stage Security Impact Analysis (SIA) to identify RMF control implications and ensure technical requirements for NCMC-ITW/AA and Legacy Space systems are met before development begins.

Requirements

US Citizen
Must have and be able to maintain a Top-Secret Security Clearance
DoD IAM Level I (CAP, CND, Cloud+, GSLC, Security+ CE, CISSP)
High School Diploma
Minimum experience/certification alignment:
- 15 years directly related experience with proper certifications as described in the functionally aligned job description, 8 of which must be in the DoD; OR
- BA/BS degree with 12 years experience in the respective technical/professional discipline, 5 of which must be in the DoD; OR
- MA/MS degree with 10 years experience in the respective technical/professional discipline, 5 of which must be in the DoD
Advanced knowledge and recognized ability to be considered an expert in the technical/professional field.
Ability to perform tasks and oversee efforts of junior and mid-level personnel.
Comprehensive understanding and ability to apply associated standards, procedures, and practices within the area of expertise.

Technologies

Agile Kanban
eMASS
RMF
PPSM
DISA PPSM Category Assurance List (CAL)
DoD Manual 8140.03
8570.01-M
CISSP
CASP+
CISM
CAP
CND
Cloud+
GSLC
Security+ CE
CASP+ CE
CCISO

Preferred Experience

DoD IAM Level II/III (CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO)

Additional Information

Location: Peterson SFB, CO
Work model: Hybrid; some telework allowed, subject to change per customer discretion
Travel: up to 25%
#LI-JC1
Salary: USD 130,000 - 165,000 per year

About the Role

Senior system cybersecurity subject matter expertise for a Peterson Space Force Base environment.
Full integration of cybersecurity across the system lifecycle from acquisition through sustainment and compliance assessment.

Odyssey Systems Consulting Group, Ltd.

Technical, engineering, and integration company serving the warfighting ecosystem (airborne integration, ISR, C2, and warfighter readiness).
Integrates layered defense systems across equipment, technology, services, and operations.
Supports defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality.
Focuses on contract execution, organizational performance, and a workplace built on employee care.

View full job page →

1d ago

Applied Cybersecurity Engineer, Lead

The MITRE Corporation Colorado Springs, CO

Colorado Springs, CO

1d ago

$159k - $238k/yr Full time Senior Cyber Defense Cybersecurity

Apply Now

Job Description

MITRE’s Mission Assured Engineering Department is seeking an Applied Cybersecurity Engineer, Lead to support DoD sponsors as a systems security and cybersecurity subject matter expert. In this onsite role in Colorado Springs, CO, you will advise, assess, and test secure system design and defensive cyber readiness through hands-on engagements and actionable analysis.

This position combines systems security engineering guidance with cyber assessment and purple teaming support, with direct in-person contributions to sponsor programs. You will also help develop and mature advanced capabilities for understanding, analyzing, and improving system resilience and security.

Key Responsibilities

Advise sponsors on developing and acquiring secure, resilient cyber-physical systems, with emphasis on protecting mission systems, strengthening defenses, and addressing security weaknesses
Use Systems Security Engineering and Cybersecurity expertise to execute cyber assessments and purple team engagements across fielded and acquisition systems
Recommend how systems are specified, designed, developed, implemented, integrated, tested, and sustained to meet security, resiliency, and safety requirements
Collaborate with sponsors and DoD customers to define priorities, support planning and execution of cyber assessments, and deliver clear, actionable findings
Support development of systems security and cybersecurity strategy, system testing and evaluation, and verification and validation efforts
Work effectively with MITRE, government, and contractors while communicating through writing, presentations, and collaborative discussions across peers, managers, and sponsors
Promote collaboration and integration across the System Security Engineering department and throughout MITRE
Research and develop new technical capabilities and processes for assessing system and technology resilience and security
Contribute to projects or small teams to solve complex cybersecurity problems for sponsors
Contribute to innovation of AI use cases applied to cyber operational challenges
Maintain cutting-edge support by keeping pace with the rapidly evolving lifecycle of emerging technologies

Required Qualifications

Typically requires 8 years of related experience with a bachelor’s degree; or 6 years with a master’s degree; or a PhD with 3 years of experience; or an equivalent combination of education and experience
Technical depth in Systems Security Engineering, Cybersecurity, Software Engineering, or Systems Engineering
Experience developing or evaluating Systems Security Engineering solutions and capabilities
Ability to think critically and be proactive in research and problem-solving with minimal supervision
Understanding of MITRE sponsor missions, domains, and cybersecurity challenges
Excellent written, oral, and interpersonal communication skills and a strong desire to learn
Knowledge of D3FEND, ATT&CK, Caldera, ATT&CK Evaluations, and MITRE’s public interest work
Experience scoping and conducting adversary emulation, simulation, or purple teaming
Experience with hands-on red teaming, penetration testing, and other offensive security operations
Experience designing and leading threat-driven cyber exercises, including tabletop and readiness exercises, plus threat assessments prioritized for adversary and mission relevance to stakeholders
Must have an active Secret U.S. Government issued Security Clearance and be eligible to obtain and maintain Top Secret/SCI; U.S. citizenship is required per U.S. Government eligibility requirements
Requires a minimum of 3 days on-site

Technologies

D3FEND
ATT&CK
Caldera
ATT&CK Evaluations

Preferred Qualifications

Experience in planning and leading cyber exercises
Demonstrated track record building strong internal and external partnerships
Active Top Secret/SCI clearance

Location and Clearance Requirements

Location: Colorado Springs, CO (onsite)
Minimum clearance required: Secret
Must obtain within one year of hire: Top Secret/SCI

Salary

USD 158,800 - 238,200 per year
Midpoint range listed as $158,800 - $198,500 - $238,200 Annual

View full job page →

Systems Security Engineering Jobs

Information Systems Security Engineer

Industrial Control System (ICS) Cybersecurity Engineer

Systems Cybersecurity Engineer

Applied Cybersecurity Engineer, Lead

Get Systems Security Engineering Jobs alerts