Information Systems Security Engineer (ISSE)

Role Overview

We are seeking an Information Systems Security Engineer (ISSE) to provide technical and hands-on security engineering support for federal cloud and enterprise systems. This role focuses on securing cloud-based architectures, integrating security across the system lifecycle, and supporting Information System Security Officers (ISSOs) with authorization and accreditation activities.

Role Responsibilities

• Design and implement security mechanisms protecting IT and cloud solutions in Microsoft Azure and Amazon Web Services (AWS).
• Integrate security requirements throughout the system development lifecycle, including applications, single and multi-purpose information systems, operating systems, and CI/CD pipelines.
• Design and assess secure information system and cloud architectures, including Azure and other cloud vendors.
• Highly experienced in designing the configuration of NSGs, Azure Firewall, Private Endpoints security, Azure VNETs, subnets, routing tables, security groups, and network Access Control Lists.
• Expert in assessing the effectiveness of implemented security mechanisms and configurations.
• Provide technical and engineering support to ISSOs performing A&A activities.
• Conduct security impact assessments for system, architecture, application, and configuration changes.
• Perform threat modeling to identify, analyze, and mitigate risks associated with application and infrastructure design changes.
• Integrate Supply Chain Risk Management (SCRM) activities aligned with NIST SP 800-161 into information system designs
• Apply application security best practices, including secure coding principles, dependency management, and vulnerability remediation.
• Support DevSecOps practices by designing and integrating security controls, scanning, and monitoring at strategic points of the CI/CD pipeline prior to introduction to a production environment.
• Design and implement security best practices to containers and Infrastructure as Code
• Develop security architecture documentation, technical standards, and risk-based recommendations based on security designs.

Required Qualifications and Education:

• Bachelor's Degree in Cybersecurity, IT, Engineering, or related field.
• 6+ years of cybersecurity and 2+ years of verifiable ISSE experience.
• Strong networking experience, including TCP/IP, routing and switching, firewalls, VPNs, load balancing, and cloud networking.
• Strong experience integrating threat modeling analysis using specific threat modeling framework(s) with security impact analysis activities.
• Demonstrated experience with Azure networking services.
• Experience with application security and DevSecOps in cloud-based environments.
• Strong knowledge of NIST RMF, FedRAMP, NIST SP 800-160, NIST SP 800-161, and NIAP / Common Criteria
• Experience with Kubernetes or other container technologies, and Infrastructure as Code preferred.
• Strong communication skills

Required Certifications

• Certified Information Systems Security Professional (CISSP) or equivalent.
• Certified Cloud Security Professional (CCSP)

Preferred Certifications:

• CISSP-ISSEP
• CISSP-ISSAP

Clearance and Location Requirements:

• Able to be cleared for a Public Trust clearance.
• This position requires to be onsite 3 days per week in Washington, DC.

Pay: $140,000.00 - $160,000.00 per year

Benefits:

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Tuition reimbursement
• Vision insurance

Application Question(s):

• Are you able to work onsite in Washington, DC, three days per week?
• Do you have a bachelor’s degree in Cybersecurity, Information Technology, or a closely related field from a U.S.-accredited institution?
• Do you have hands-on experience designing and securing Azure network architectures using NSGs, Azure Firewall, Private Endpoints, VNETs, subnets, and routing tables?

License/Certification:

• CISSP (Required)
• CCSP (Required)
• CISSP-ISSAP (Preferred)
• CISSP-ISSEP (Preferred)

Security clearance:

• Secret (Required)

Ability to Commute:

• Washington, DC 20581 (Required)

Work Location: Hybrid remote in Washington, DC 20581