> Markdown version of [/jobs/ext/1508550-information-system-security-engineer](https://www.wearedevelopers.com/jobs/ext/1508550-information-system-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information System Security Engineer - **Company:** Cyber Defense Technologies - **Location:** Lexington, KY, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Android Software Development, Apple IOS, Signals Intelligence, Cyber Security, Information Systems, Linux, Graphics Software, Information Security Management, Networking Hardware, Intrusion Detection and Prevention, Log Analysis, Microsoft Software, Security Content Automation Protocol, Software Vulnerability Management, SC Clearance, Information Technology, Patch Management, Nessus, Nexpose, Cyber Warfare, Multiplatform, Cisco, Vulnerability Analysis, Vmware - **Published:** July 30, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9065456/information-system-security-engineer ## About the Role Clearance Requirements: An active Secret clearance is required, TS/SCI preferred. All candidates must be U.S. Citizens. Applicants who do not meet these requirements will not be considered., * Experience with RMF process and requirements (NIST 800-53) * Experience with virtualized and standalone environments (VMware) * Experience with patch management solutions * Experience with standard forensic practices, imaging software, tools, and techniques * Experience with Security Technical Implementation Guide (STIG) experience * Experience with Vulnerability Management (Nessus, NexPose, OpenVAS, etc) * ELINT, Radio Frequency, Electronic Warfare, and/or SIGINT experience a plus * Translating technical customer requirements into business process and tasking * Technical consulting both buyer and end user customer personnel in a complex environment * System Administration experience with Linux and Windows * Experience with administration and forensic practices with mobile platforms is a plus, * Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related technical field; or work relevant work experience equivalent. * Minimum 4 years of information security-related experience in areas such as security operations, vulnerability management, security testing, system patching, log analysis, intrusion detection, or security device administration. * Knowledge of RMF, Windows/Linux operating systems, STIGs, ACAS, HBSS, and/or related technologies. * Demonstrated ability to work independently, analyze root causes, and drive solutions from identification through resolution. * U.S. Citizenship and active Secret clearance (or higher), clearable to TS/SCI., * Active DoD 8570 IAT Level II (or higher) certification preferred at time of hire (e.g., Security+ CE, CASP+, CISSP). * Hands-on experience with vulnerability assessment tools (ACAS, Nessus, SCAP), VMware, image deployment/orchestration, and multi-platform hardening. * Technology-specific certifications (Cisco, VMware, Microsoft, etc.) relevant to the environment. * Experience supporting rapid ATO processes and continuous monitoring in DoD/IC environments. Travel: CONUS Travel of 10 to 15% may be required depending on program needs ## Description Overview: Cyber Defense Technologies (CDT) is seeking a proactive Information Systems Security Engineer (ISSE) to support Risk Management Framework (RMF) compliance, system hardening, and security engineering across a diverse portfolio of systems. This role requires independent ownership of complex security challenges- from vulnerability assessment and remediation through continuous monitoring-while ensuring alignment with DoW and USSOCOM security policies. You will bridge high-level security architecture with hands-on implementation across physical and virtual operating systems, networking devices, enterprise, embedded, and air-gapped environments., * Perform security design, configuration, hardening, testing, and monitoring of advanced information systems independently or as part of a team. * Conduct vulnerability testing and apply current compliance standards and technical controls across Windows, Linux, Android, iOS, and related platforms. * Support security architecture development; enforce trusted relationships with external systems; assess and mitigate security threats/risks throughout the program lifecycle. * Assist vendors and system developers in implementing DoW/USSOCOM security functionality and enterprise solutions. * Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities. * Review Assessment & Authorization (A&A;) documentation for completeness and compliance. * Support rapid Fielding and Deployment Release processes by ensuring RMF and Authorization to Operate (ATO) requirements are met. * Create and maintain IA policy documentation and RMF artifacts, including System Security Plans (SSP), Security Assessment Reports, Risk Assessments, POA&Ms, Control Implementation/Validation documents, Ports/Protocols/Services matrices, network/architecture diagrams, and accreditation boundaries. * Execute cross-platform patch management and system imaging. * Map NIST 800-53 controls and DISA CCIs to system capabilities in support of ATO maintenance and renewals. * Engage customer technical points of contact as needed during architecture and implementation activities. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Generating code with Angular schematics](https://www.wearedevelopers.com/videos/129-generating-code-with-angular-schematics) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)