Information System Security Engineer
Information System Security Engineer (ISSE) Locations: Maryland Clearance Required: Active TS/SCI with Full Scope Polygraph Citizenship: U.S. Citizenship Required Certification Requirement: DoD 8570/8140 IASAE Level II Compliant Certification RequiredPosition OverviewRequired QualificationsActive TS/SCI with Full Scope Polygraph security clearanceU.S. CitizenshipDoD 8570/8140 IASAE Level II compliant certification requiredStrong understanding of the Risk Management Framework (RMF)Experience supporting Assessment & Authorization (A&A) and Authority to Operate (ATO) processesExperience with security control implementation, validation, and continuous monitoringFamiliarity with NIST SP 800-37 and NIST SP 800-53 (Rev. 3 and/or Rev. 5)Experience with RMF and cybersecurity tools such as:LATTEARTXACTABISCOTTIWATCHCATSTEExperience with compliance and configuration scanning toolsStrong analytical, troubleshooting, and documentation skillsTechnical ResponsibilitiesSupport the full RMF lifecycle for classified systemsAssist with A&A package development and Authority to Operate (ATO) maintenanceImplement, assess, and validate security controlsPerform Security Control Traceability and technical validationSupport system boundary definition and security architecture documentationDevelop and maintain RMF artifacts and body of evidence packagesConduct compliance and vulnerability scanning analysisValidate findings including false positive identification and remediation verificationSupport STIG implementation and configuration hardeningManage patch validation and security compliance effortsParticipate in Continuous Monitoring (ConMon) activitiesCore ISSE Skill AreasAssessment & Authorization (A&A) execution and supportSecurity Control implementation and validationRMF documentation and artifact developmentSystem boundary definition and architecture supportVulnerability management and remediation trackingSTIG implementation and compliance validationTechnical security assessment and risk analysisContinuous Monitoring (ConMon) supportPreferred QualificationsExperience in classified Government cybersecurity environmentsFamiliarity with enterprise Linux, network, or cloud systemsExperience working with ISSOs, ISSMs, SCAs, and System OwnersUnderstanding of vulnerability management and cybersecurity automation toolsExperience supporting large-scale enterprise or mission systemsIASAE Level II Certification ExamplesAcceptable certifications include:CISSPCASP+CCSPCSSLP