> Markdown version of [/jobs/ext/1383889-information-systems-security-engineer](https://www.wearedevelopers.com/jobs/ext/1383889-information-systems-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Engineer

- **Company:** Cornerstone Defense
- **Location:** Herndon, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Xacta, C (Programming Language), Amazon Web Services, Systems Engineering, User Authentication, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Cyber Security, Linux, Perl (Programming Language), Identity and Access Management, Integrated Development Environments, Python (Programming Language), Open Source Technology, Windows PowerShell, SQL Databases, Software Vulnerability Management, Webinspect, Office365, Software Security, Tanium Platform Expertise, Uipath, Data Analytics, Nessus, Nutanix, Splunk, Plan of Action and Milestones, Vmware
- **Published:** July 22, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9047212/information-systems-security-engineer

## About the Role

* Self-starter able to work independently and build relationships with technical reps across divisions, comfortable with cyber security and able to brief issues to the customer
 * Over 5 years of experience working on Government Agency enterprise infrastructure and engineering programs.
Preferred Education, Experience, & Skills:

 * Nessus / Rapid7
 * Security Development and Operations (SecDevOps)
 * Various security tools and processes such as Splunk, Nessus Security Center, WebInspect, Xacta
 * Cloud security controls and implementation
 * STIG compliance and vulnerability management
 * CISSP
 * AWS Certified Security Specialty
 * Microsoft Office365
 * Experience in one or more software products associated with cyber system engineering for data analytics including SQL security, TANIUM Endpoint Management Software, PowerShell, MacAfee, App Blocker, Splunk ITSI.
 * Experience with one or more software development environments supporting commercial or open-source tools including but not limited to: Linux, Python, C, Bash Scripting, Perl, SQL, Splunk Phantom, UBA, and UIPath
 * Experience in one or more cloud computing services and technologies including but not limited to: AWS/C2S, Microsoft Azure, Nutanix, VMware.

## Description

We are actively seeking an Information Systems Security Engineer (ISSE) with a minimum of 11 years' experience with a Bachelor's Degree. Other degrees will be considered with the year's experience adjusted to accommodate. We are looking for a candidate with specific skills that may include the following:

 * Implementation and validation of security controls that support the Risk Management Framework (RMF) and ICD 503 Security Accreditation
 * Developing architecture documentation and Systems Security Plans (SSP) to support Accreditation and Authorization (A&A) reviews
 * POA&M development and implementation
 * Coordinating with customer security organizations to achieve Authority to Operate (ATO).
 * Knowledge of the complex environment involving shared networks and multiple security enclaves
 * Engineering for Cyber engineering and integration services including security, authentication, identity management, authorization, and access control engineering.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Generating code with Angular schematics](https://www.wearedevelopers.com/videos/129-generating-code-with-angular-schematics)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)