Information Systems Security Engineer (ISSE)

VTG LLC

Chantilly, VA, United States

2 months ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

5 years minimum

Working hours

Regular working hours

Job source

indeed.com

Tech stack

Microsoft Windows Cyber Security Information Systems Linux Identity and Access Management Intrusion Detection Systems Network Security Security Information and Event Management Firewalls (Computer Science) Information Technology Nessus Vulnerability Analysis

Job description

We are seeking a highly skilled Information Systems Security Engineer (ISSE) to design, implement, and maintain security controls across enterprise systems and networks. This role ensures systems are compliant with security requirements while supporting mission-critical operations. The ISSE will work closely with system owners, engineers, and cybersecurity teams to integrate security throughout the system lifecycle. Responsibilities:

Design, implement, and maintain security controls for information systems and networks
Support the Risk Management Framework (RMF) lifecycle, including system categorization, control selection, implementation, assessment, and authorization
Conduct security assessments, vulnerability scans, and risk analysis
Develop and maintain system security documentation (SSP, POA&M, SAR, etc.)
Ensure systems comply with NIST, RMF, and organizational security policies
Collaborate with ISSOs, system administrators, and developers to remediate vulnerabilities
Support continuous monitoring and incident response activities
Implement and manage security tools (SIEM, IDS/IPS, endpoint protection, etc.)
Provide technical guidance on secure system architecture and design
Stay current on emerging threats, vulnerabilities, and security technologies

Requirements

Do you have experience in Windows?, Do you have a Bachelor’s degree?, * Active TS/SCI with Polygraph required.

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
5+ years of experience in information security, with focus on system security engineering
Hands-on experience with RMF and NIST 800-53 controls
Experience developing and maintaining A&A documentation (SSP, POA&M, ATO packages)
Knowledge of operating systems (Windows, Linux) and network security principles
Experience with vulnerability scanning tools (ACAS, Nessus, or similar)
Familiarity with security tools such as SIEM, firewalls, and endpoint protection
Understanding of encryption, identity management, and access control mechanisms