> Markdown version of [/jobs/ext/1296803-information-system-security-engineer-isse](https://www.wearedevelopers.com/jobs/ext/1296803-information-system-security-engineer-isse). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information System Security Engineer (ISSE) - **Company:** Peraton Inc - **Location:** Annapolis Junction, MD, United States - **Experience:** Expert - **Salary:** $135,000.0 - $216,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Amazon Web Services, Automation of Tests, Microsoft Azure, Bash Shell, Ubuntu (Operating System), Cloud Computing, Cloud Computing Security, Information Systems, Computer Networks, Information Security Management, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Python (Programming Language), Linux Servers, Windows Servers, Package Development Process, Password Management, Windows PowerShell, Systems Development Life Cycle, Red Hat Enterprise Linux, Ansible, Security Software, Session Manager SubSystems, Security Information and Event Management, Software Deployment, TCP/IP, Virtualization Technology, VMware VSphere, Software Vulnerability Management, Cyberark, IT Architecture, Test Scripts, Firewalls (Computer Science), Gitlab, Containerization, Kubernetes, Tenable Nessus, Operational Systems, CIS Benchmarks, Cyber Warfare, Splunk, Devsecops, Qualys - **Published:** July 16, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9035995/information-system-security-engineer-isse ## About the Role * 5 years with BS/BA; 3 years with MS/MA; 0 years with PhD with 4 plus years in lieu of degree * Must possess an active Top Secret with SCI Eligibility * Must be DoD 8570.1-M/8140 IAT Level III certification (SecurityX (CASP), GCIH, CISA, CISSP) compliant * Strong background in networking (TCP/IP, firewalls, VPNs), cloud security (AWS/Azure), Kubernetes, and DevSecOps. * Deep understanding of NIST SP 800-161, NIST RMF, FedRAMP, Common Criteria, ATO package development, and cybersecurity compliance (STIGs). * Hands-on experience managing and deploying Tenable Nessus, CyberArk, Trellix, Splunk Enterprise, VMware vSphere, GitLab, Microsoft Windows Server, Red Hat Enterprise Linux and Ubuntu Linux * Experience with scripting and automation with Powershell, Python, Bash and Ansible * Proven experience in leading projects and mentoring junior ISSE's. * Present technical briefings to leadership. ## Description Engineering, integration, and cybersecurity support to design, build, and test enhanced services for the Department of Navy's IT architecture. Offers a wide range of roles, from cybersecurity experts to engineers specializing in systems, networks, software, and data center services., * Design, implement, and maintain enterprise security architecture aligned with NIST RMF, DoD STIGs, CIS benchmarks, and organizational cybersecurity policies. * Perform security engineering activities across system development lifecycle (SDLC), including requirements analysis, system design reviews, security testing, and accreditation support. * Implement vulnerability management processes utilizing Tenable Nessus, ACAS, and Qualys to identify, assess, and remediate system vulnerabilities. * Integrate cybersecurity requirements into Windows and Linux server environments, cloud infrastructure, virtualization platforms, and containerized applications. * Support incident response and forensic investigations by analyzing security logs, SIEM alerts, network traffic, and endpoint telemetry using Splunk Enterprise. * Develop automation scripts using PowerShell, Bash, and Python to streamline vulnerability remediation, account auditing, compliance reporting, and security monitoring tasks. * Collaborate with system administrators, network engineers, ISSOs, and application teams to remediate security findings and implement secure configuration baselines. * Perform security impact analysis for system changes, software deployments, and infrastructure upgrades to ensure continued compliance and operational security. * Engineer endpoint protection and hardening solutions utilizing Trellix ePO - On-prem, host-based firewalls, and application whitelisting technologies. * Evaluate and implement cybersecurity tools and technologies to improve system security posture, continuous monitoring, and threat detection capabilities. * Produce technical security documentation, architecture diagrams, standard operating procedures (SOPs), and executive-level risk assessment reports. * Experience administrating, configuring, and troubleshooting core modules such as Enterprise Password Vault (EPV), Password Vault Web Access (PVWA), Central Policy Manager (CPM), and Privileged Session Manager (PSM) in CyberArk. * Monitors, analyzes, and detects cyber events and incidents within information systems and networks under general supervision. * Assists with integrated, dynamic cyber defense, coordinates and maintains security toolsets to support organizations' continuous monitoring and ongoing authorization programs. * Establishes a framework by which cyber risk can be measured and quantified in the marketplace. * Determines security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates. * Implements security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation. Verifies security systems by developing and implementing test scripts. * Maintains security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs. * Responsible for the design, development, implementation, and integration of a DoD IA architectures, systems, or system components for use within computing, network, and enclave environments. * Ensures that the architecture and design of development and operational systems are functional and secure. * This includes designs for program of record systems and special purpose processing nodes with platform IT interconnectivity. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders) - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)