Information Systems Security Engineer 1

What you'll do

• Serve as the technical security engineer for assigned systems and System Security Plans to ensure full lifecycle RMF compliance.
• Provide technical input for Authorization to Operate (ATO) packages, risk acceptance decisions, and continuous monitoring efforts.
• Implement and validate security controls from NIST SP 800-53 and map them within the Security Control Traceability Matrix.
• Coordinate with ISSOs and system administrators to document and remediate vulnerabilities, control deficiencies, and POA&M items.
• Lead reauthorization efforts by updating and validating all system technical artifacts on schedule.
• Evaluate and document security-relevant changes, including configuration updates, patches, and system modifications for RMF impact.
• Collaborate with vulnerability scanning teams to ensure scan compliance and accurate reflection of the system’s risk posture.
• Test and evaluate security configurations within a lab environment.

What we're looking for

• TS/SCI security clearance with a polygraph is required.
• Seven years of experience as an ISSE on Federal Government programs and contracts of similar scope and complexity is required.
• A Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline is required.
• Four years of additional ISSE experience may be substituted for a bachelor's degree.
• DoD 8570 compliance with IASAE Level 2 is required.
• Demonstrated experience authoring and maintaining System Security Plans (SSPs), SCTMs, and POA&Ms is required.
• Knowledge of servers, virtualization, routers, switches, firewalls, VLANS, routing, and network segmentation is required.
• Knowledge of Windows, Linux, and network security controls implementation is required.
• Hands-on familiarity with Tenable, Splunk, STIG Viewer, and customer security compliance management tools is required.
• Python skills are preferred.