Information Systems Security Engineer

Job Title: Information Systems Security Engineer (ISSE)

Location: Arlington, VA

We are seeking an experienced Information Systems Security Engineer (ISSE) to join our team in Arlington, VA. The ideal candidate will have a strong technical background in cybersecurity, with hands-on experience in assessments, incident response, threat hunting, threat intelligence, malware analysis, and network security.

Responsibilities:

• Design, implement, and maintain security controls to protect information systems and data
• Conduct technical assessments to identify vulnerabilities and recommend remediation strategies
• Ensure compliance with industry standards and regulations
• Collaborate with cross-functional teams to implement security controls in AWS and other various cloud computing environments
• Ensure the environment is updated according to DoD standards and guidelines
• Follow approved DoD, STIG standards and DoD IAVA requirements; advise / make recommendations of needed updates to HBSS Lead
• Ensure that all systems are operating with valid licenses for all installed software
• Monitor and audit configurations to ensure that unintended changes do not occur
• Act as a trusted advisor to clients, understanding cybersecurity or data protection requirements and challenges
• Lead technical discussions, demonstrations, and presentations, effectively communicating the value proposition of our security solutions to both technical and non-technical stakeholders
• Continuous knowledge of industry trends and emerging threats in cyber security to continuously enhance our solutions and customer value
• Work collaboratively with team members, Information Assurance, Information Security Engineering, and other Subject Matter Experts to resolve security issues
• Solid understanding of cybersecurity principles, including, malware analysis, network security, and cloud security
• Solid understanding of security operations, networking, system administration and security architecture
• A clear understanding of cyber risks and the threat landscape related to cyber attacks
• Maintain thorough documentation of all activities and communications through ticketing systems, operational briefs, and status reports
• Support RMF lifecycle activities including system authorization and ATO efforts
• Ensure compliance with DoD, NIST, STIG, and IAVA requirements
• Develop and maintain System Security Plans (SSPs) and IA artifacts
• Validate security control implementation and effectiveness
• Coordinate with ISSOs, system owners, and auditors
• Track POA&M items and remediation status
• Advise stakeholders on compliance gaps and risk posture
• Implement and validate security controls in AWS and cloud environments
• Assess cloud configurations for risk and compliance alignment
• Support secure system migrations and modernization efforts
• Create scan policies,  credential management, and endpoint/Nessus agent management on Tenable Nessus Manager
• Review and apply Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) requirements to servers and endpoints
• Perform eMASS or other GRC tools tasks, including system registration & boundary definition, document control implementation, and security control assessment support

Requirements:

• Bachelor’s degree from accredited university
• Minimum 10 years of cybersecurity / information security experience
• Active DoD IAT Level II Certification (Security+, CySA+, SSCP, etc.)
• Active Computing Environment (CE) Certification (AWS, Azure, Linux+, VCP, etc.)
• Active DoD Secret Clearance (or eligibility)
• Strong experience with:

HBSS / endpoint security platforms

Vulnerability assessments

eMASS and GRC tools

Incident response / threat analysis

RMF / STIG / IAVA compliance

Cloud security