Information Systems Security Engineer, ISSE

This is a fully remote position, open to applicants in United States.

📋 Description

• Convert mission requirements and security needs into system architectures, control implementations, secure configurations, and verifiable acceptance criteria.

• Conduct threat modeling and security design evaluations.

• Identify trust boundaries, attack surfaces, data flows, dependencies, and technical risks prior to deployment.

• Design and implement security controls for AWS infrastructure, Linux systems, containers, Kubernetes, application interfaces, and related services.

• Set up and verify identity and access controls, least-privilege permissions, network segmentation, encryption, certificates, secrets management, audit logging, and security monitoring.

• Apply DISA STIGs and recognized hardening baselines; assess changes for security efficacy and mission implications.

• Embed security scanning and checks within CI/CD pipelines.

• Utilize scripting, infrastructure as code, and configuration automation to deploy repeatable controls, detect configuration drift, and gather technical evidence.

• Evaluate vulnerability findings, implement solutions, retest remediation, and suggest compensating controls when necessary.

• Create and execute security verification tests and assist authorized assessments.

• Diagnose application, network, cloud, identity, and container security challenges.

• Generate security diagrams, configuration baselines, control implementation details, and testing evidence supporting RMF activities and ATO packages.

• Collaborate with the ISSO and ISSM on technical remediation and closure evidence.

• Document residual risks and provide recommendations for government risk decisions without independently accepting risk.

• Evaluate proposed system changes, maintain engineering documentation and runbooks, and assist with incident investigation, recovery, and corrective actions.

⛳️ Requirements

• Active Secret security clearance, with the capability to obtain and maintain Top Secret if necessary.

• At least five years of pertinent experience in systems security engineering, cybersecurity engineering, cloud security, secure platform engineering, or a related technical field.

• Practical experience in implementing, troubleshooting, and verifying security controls.

• Experience in engineering or securing DoD information systems, including those operating on or connected to DODIN.

• Hands-on professional experience in implementing, securing, operating, and troubleshooting AWS workloads.

• Practical knowledge of AWS IAM, VPC, security groups, compute and storage security, encryption, CloudTrail, and CloudWatch.

• Experience in hardening and troubleshooting Linux systems and containerized workloads; familiarity with Kubernetes security controls.

• Proficient in using scripting, infrastructure as code, or configuration-management tools to automate security tasks.

• Familiarity with source control and software delivery pipelines.

• Working knowledge of TCP/IP networking, routing, firewalls, network segmentation, secure application connectivity, certificates, encryption, and identity and access management.

• Experience with RMF requirements, NIST SP 800-53 controls, STIGs, vulnerability scanning, remediation practices, and authorization evidence.

• Current relevant cybersecurity certification and the ability to meet applicable contractual workforce qualifications, including DoD 8140 work-role requirements where applicable.

• Strong technical writing, troubleshooting, and coordination abilities.

• Capability to work independently with distributed engineering teams and support occasional travel.

• U.S. Government security clearance eligibility; only U.S. Citizens are eligible for a security clearance.

• A college degree is not mandatory.

🏝️ Benefits

• Periodic travel may be necessary for integration, assessments, customer meetings, and access to approved facilities.

• Commitment to equal employment opportunity.

• Application accommodations available for individuals with disabilities.