Information System Security Engineer

What you'll do

• Design, develop, and maintain secure classified information systems and architectures following JSIG and RMF guidelines.
• Provide security engineering support throughout the full system lifecycle from research and development to decommissioning.
• Implement and validate DISA STIGs, SRGs, and vendor security guidance across Windows, Linux, and network infrastructure.
• Develop secure configuration baselines, build procedures, automation scripts, and configuration management processes.
• Troubleshoot and resolve complex security and infrastructure issues involving various information systems and components.
• Prepare for and execute government security assessments, authorization reviews, inspections, and audits by collecting objective evidence.
• Provide technical cybersecurity guidance and mentoring to system administrators, ISSOs, and other program personnel.
• Maintain system security architecture including network segmentation, encryption, auditing, and data protection solutions.

What we're looking for

• Must be a U.S. Citizen.
• Must hold an active DoD Top Secret security clearance and be eligible for SCI and SAP eligibility.
• Must have a DoD 8140/8570 IAT level II or higher certification, such as CompTIA Security+.
• Must have a Bachelor's degree with 8-12 years of experience, a Master's degree with 6-10 years of experience, or equivalent experience/certifications.
• Must have professional-level experience administering and securing Windows and Linux operating systems in enterprise environments.
• Must have expert-level knowledge of virtualization technologies, enterprise storage platforms, and backup/recovery solutions.
• Must have 3+ years of experience supporting Special Access Program (SAP) environments using RMF and JSIG.
• Must have hands-on experience implementing DISA STIGs, SRGs, Nessus, and secure configuration baselines.
• CISSP, CISSP-ISSEP, or RHCSA certifications (preferred).
• Experience developing and maintaining SIEM/log-management platforms like Splunk or endpoint security technologies like DLP (preferred).