Information System Security Engineer

Information Systems Security Engineer (ISSE)Spry Methods is seeking an Information Systems Security Engineer (Isse) to support secure, mission-focused information systems in a high-impact government environment. The Isse will contribute to the design, implementation, and maintenance of cybersecurity controls across enterprise and mission systems, working closely with engineering, operations, and security teams to ensure systems meet federal cybersecurity and authorization requirements.Position Responsibilities:Support the identification of information protection needs and security requirements for information systems and network environmentsContribute to the design and implementation of security architectures and security controls across system componentsAssist with security engineering activities throughout the system lifecycle, including requirements, design, implementation, testing, and operationsSupport the implementation of security measures that ensure confidentiality, integrity, availability, authentication, and non-repudiationParticipate in Risk Management Framework (Rmf) activities, including security control implementation, assessment support, and continuous monitoringDevelop and maintain security documentation such as System Security Plans (Ssps), security control artifacts, Poams, and AtosAssist in assessing the security impact of system changes, enhancements, and architectural modificationsSupport vulnerability management efforts, including reviewing scan results and coordinating remediation actionsCollaborate with system engineers, network engineers, developers, and security stakeholders to support authorization activitiesMinimum Requirements:Top Secret (Ts) Clearance with Sci eligibility.3 - 5 years of demonstrated experience supporting cybersecurity or information assurance activities within enterprise or mission systemsWorking knowledge of the NIST Risk Management Framework (Rmf), Fisma and Atos processesFamiliarity with common security assessment, vulnerability scanning, and monitoring tools (e.g., Nessus, Nmap, Guardium, Webinspect, or similar)Understanding of system and network security principles, including access control, boundary protection, and secure system designExperience supporting cloud security in environments such as AWS Govcloud, C2s, Sc2s, and Microsoft Azure.Analyze logs using Splunk and AWS tools.Ability to document security controls and communicate technical information clearanceHands-on experience with vulnerability assessment and configuration tools such as Nessus, AcsA, and Splunk.Preferred Qualifications:Certifications: Cissp, Cism, Casp+ Cecap, Security+, AWS Certified Security Specialty, or other relevant certifications.Experience in a high-side or multi-enclave (U/S/Ts) environment.Experience working with Agile development teams and Ci/cd pipelines.Familiarity with NIST 800-53 Rev. 5