Information Systems Security Engineer
Role details
Job location
Tech stack
Job description
Scientific Research Corporation (SRC) is seeking a qualified, forward-leaning Information Systems Security Engineer (ISSE) to support Test Resource Management Center operation of the Artificial Intelligence Digital Engineering Test Laboratory (AIDETL) in Augusta, Georgia. This role will be pivotal in developing the next generation of government AI Test & Evaluation professionals for the Department of War. In addition, the candidate will be responsible for ensuring the secure design, integration, and operation of cloud-based solutions across the Government's enterprise environment. The ideal candidate is a motivated self-starter with strong problem-solving skills, good interpersonal skills, willingness to mentor interns, the ability to resolve issues in complex environments, and is committed to embedding security into every stage of system development. As part of our mission-driven team focused on secure, innovative cloud service integration, you will work with cutting-edge technologies across multiple platforms while contributing to projects that directly strengthen organizational resilience and operational success.
Responsibilities will include, but may not be limited to:
- Leading security engineering efforts for cloud service integrations, ensuring compliance with Risk Management Framework (RMF) standards
- Conducting security assessments and validations and preparing documentation to support the accreditation and certification processes
- Serving as a trusted advisor on cybersecurity risks, mitigation strategies, and secure architecture design
- Providing technical guidance and mentorship to interns, junior engineers and security personnel on security and compliance practices
- Applying expertise in data governance and management to ensure secure handling of sensitive information
- Navigating and enforcing compliance with Impact Level (IL) 4,5, and 6, Federal Risk and Authorization Management Program (FedRAMP), and ports/protocols/procedures requirements
- Driving process-oriented approaches to ensure repeatable, scalable, and auditable security practice
- Assist in AIDETL curriculum development
Requirements
- 3-5 years of hands-on DoD RMF on cloud-based integration
- Proven ability to integrate security into system architecture and lifecycle processes
- Understanding of data governance and management principles
- Proven experience with Enterprise Mission Assurance Support Service (eMASS)
- Excellent communication and documentation skills for technical and executive audiences
- Demonstrated ability to work independently as a motivated, self-starter with a forward-leaning mindset
- Experience working in DoD or federal environments with knowledge and understanding of strict compliance requirements
- Knowledge of secure API integration and cloud-native security tools
- Enterprise Mission Assurance Support Service (eMASS) experience and Risk Management Framework (RMF) familiarity of the process and library of tools, diagrams, and documents to support and aid in the execution of the RMF Assess & Authorization process
Desired Skills
- CISSP (Certified Information Systems Security Professional) certification preferred
Clearance Information
SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL
Travel Requirements
- 10% travel primarily to Academic institutions, but also to cyber and physical ranges or industry events
Benefits & conditions
SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals starting at 10 days of vacation and 5 days of sick leave annually, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.