Position Summary:
We are seeking a highly experienced Senior Information Systems Security Engineer (ISSE) to join our cybersecurity team. The ideal candidate will have more than 10 years of hands-on experience in information security engineering, with deep knowledge and practical application of FISMA and NIST security frameworks. You will be responsible for designing, implementing, and maintaining secure systems and architectures that comply with federal information security standards and organizational policies. Active TS/SCI required.
Responsibilities:
- Lead security engineering efforts throughout the system development life cycle (SDLC) for both new and existing systems.
- Develop, implement, and assess security solutions and architectures that comply with FISMA, NIST SP 800-series, and organizational policies.
- Conduct system risk assessments, security impact analyses, and vulnerability evaluations.
- Support the preparation and maintenance of System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Assessment Reports (SARs), and Plan of Action & Milestones (POA&Ms).
- Design and integrate secure network and system configurations to mitigate potential threats and vulnerabilities.
- Work closely with system architects, administrators, developers, and compliance teams to ensure security requirements are understood and implemented effectively.
- Serve as the subject matter expert (SME) for security control implementation, technical mitigations, and continuous monitoring strategies.
- Support Authorization to Operate (ATO) processes under RMF (Risk Management Framework).
- Provide mentorship and technical guidance to junior security engineers and analysts.
$120,000 - $150,000 a year
