Information Systems Security Engineer

CenCore is seeking an Information Systems Security Engineer to support vulnerability management, compliance scanning, and security reporting across secure federal environments. This role configures, operates, and maintains Tenable.sc, Nessus, Splunk, and related tools to identify vulnerabilities, validate system hardening, and support remediation tracking. The position works closely with system administrators, ISSEs, customer resources, and program teams to improve security posture, support Risk Management Framework activities, and provide audit-ready vulnerability and compliance documentation. This role is located at Fort Meade, Maryland, may require after-hours response in a 24x7 environment, and may require duties outside the normal work location.

Key Responsibilities

• Configure, operate, and maintain Tenable.sc and Nessus to identify, track, and report vulnerabilities across supported environments.
• Troubleshoot vulnerability scans and coordinate with customer, system administration, ISSE, or program resources to resolve scan issues.
• Conduct Security Technical Implementation Guide compliance scans and interpret results to validate system hardening and control effectiveness.
• Analyze vulnerability data, trends, and risk indicators to create actionable findings and coordinate remediation efforts.
• Integrate vulnerability and compliance data into Splunk for correlation, trend analysis, and automated compliance reporting.
• Develop dashboards and reports that visualize system risk posture, vulnerability trends, and remediation progress.
• Support Risk Management Framework activities by providing technical input, vulnerability results, and evidence related to security controls.
• Assist in developing, refining, and maintaining scanning policies, baselines, and standard operating procedures.
• Support audits and assessments by providing vulnerability data, remediation evidence, and STIG compliance documentation.
• Test and evaluate configurations in a lab environment and provide security operations support as needed.

Required Qualifications

• Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline from an accredited college or university; or an associate degree in one of those disciplines and a technical certification such as Security+ plus two years of general IT experience; or a high school diploma/GED and four years of general IT experience, including at least one year of information systems security experience.
• Active DoD 8570.01-M compliance with Information Assurance Technical Level II, such as Security+, or Information Assurance Systems Architect and Engineer Level I, such as CASP or CISSP.
• Active TS/SCI clearance with full scope polygraph.
• Working knowledge of DoD Security Technical Implementation Guides and the Risk Management Framework process, including NIST 800-53.
• Knowledge of servers, virtualization, routers, switches, firewalls, VLANs, routing, and network segmentation.
• Experience using Splunk for data ingestion, search queries, correlation, and report creation.
• Ability to respond to after-hours requests as required in a 24x7 environment.

Preferred Qualifications

• Experience as an Information Systems Security Engineer on federal government programs or contracts of similar scope, type, and complexity.
• Experience implementing security vulnerability testing tools for continuous monitoring and patch verification.
• Experience supporting audits, assessments, remediation tracking, and compliance documentation in secure or regulated environments.
• Experience developing dashboards, reports, scanning baselines, scanning policies, or standard operating procedures.
• Experience coordinating remediation with system administrators, security engineers, customer stakeholders, or program teams.

Skills / Competencies

• Vulnerability management and compliance scanning.
• Tenable.sc, Nessus, and Splunk administration and reporting.
• STIG compliance analysis and security-control validation.
• Risk Management Framework support and technical documentation.
• Network, server, virtualization, and firewall concepts.
• Data analysis, dashboard development, and trend reporting.
• Clear communication, teamwork, and customer coordination.
• Results-oriented problem solving and self-directed follow-through.

Work Environment and Physical Requirements

This role supports secure information systems and security operations in a federal or mission-focused environment at Fort Meade, Maryland. The position may require after-hours response in a 24x7 environment and may require work outside the normal work location. Duties may include computer-based analysis, technical coordination, lab testing, reporting, and interaction with system administrators, ISSEs, customer resources, and program teams. Local travel may be required, but TDY travel is not currently indicated.

Company Overview

At CenCore, we deliver security solutions that support critical national security missions. We specialize in designing, building, securing, and maintaining advanced technology environments at the intersection of emerging technology and national security. We are seeking a dependable, cleared professional to join our team in support of secure IT and network operations.

Compensation Overview

The approved pay rate listed for this position is $41.41 per hour. Eligible employees may enroll in company-sponsored medical, dental, and vision benefits in accordance with plan terms and enrollment requirements. The company contributes toward employee healthcare premiums, subject to plan provisions. Employees are also eligible to participate in the company's 401(k) retirement savings plan, including employer matching contributions in accordance with plan guidelines and eligibility requirements. Paid time off, sick leave, and holiday benefits are provided in accordance with company policy, applicable contract requirements, and federal, state, and local laws. Benefit eligibility and accrual rates may vary based on position, location, and length of service. The company is committed to equitable pay practices and does not seek or rely on an applicant's wage history when making compensation decisions.

Benefits may be modified from time to time in accordance with company policy and applicable law.

Equal Opportunity Employer Statement

CenCore is an equal opportunity employer. We hire based on merit and qualifications and do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, genetic information, pregnancy, childbirth or related medical conditions, or any other status protected by applicable federal, state, or local law.