> Markdown version of [/jobs/ext/2012492-information-system-security-engineer-iii-isse-iii](https://www.wearedevelopers.com/jobs/ext/2012492-information-system-security-engineer-iii-isse-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information System Security Engineer III (ISSE III - **Company:** Trace3's Dna - **Location:** United States - **Experience:** Expert - **Salary:** $14,000.0 - $155,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Microsoft Windows, Amazon Web Services, Systems Engineering, Cyber Security, System Configuration, Linux, Information Security Management, Information Systems Security Architecture Professional, Information Systems Security Engineering Professional, Key Management, Network Architecture, Zero Trust Network Access, Security Content Automation Protocol, Software Vulnerability Management, Cloud Platform System, Kubernetes, Information Technology, Nessus, Devsecops, Docker, Plan of Action and Milestones, Vulnerability Analysis - **Published:** August 10, 2026 - **Apply:** https://www.dice.com/job-detail/17f865ec-d7fd-460b-8fef-b8882606db7d ## About the Role * Minimum of 5 years of experience in cybersecurity, systems engineering, or information assurance * Experience implementing the DoD Risk Management Framework (RMF) in regulated or classified environments * Active certification meeting DoD 8570 / 8140 requirements (e.g., CISSP, CASP+, or equivalent) * Strong understanding of: * Network architecture and protocols * Encryption and key management * Secure system configuration (Windows and Linux) Experience with vulnerability assessment tools (e.g., Nessus, ACAS, SCAP) Ability to communicate complex technical risks to non-technical stakeholders PREFERRED QUALIFICATIONS: * CISSP-ISSEP or advanced cybersecurity certification * Experience working in AWS classified or GovCloud environments * Familiarity with DevSecOps pipelines and CI/CD security integration * Experience with container security (Docker, Kubernetes) * Knowledge of Zero Trust Architecture (ZTA) * Experience with compliance-as-code and automation tools ## Description We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the "big picture." We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems. Juice - The "Stuff" it takes to be a Needle Mover We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like. Teamwork - Humble, Hungry and Smart We are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it's due and demonstrate transparency. We "bring the weather" by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures - not just their success. We appreciate the individuality of the people around us. *This position will be hybrid remote, with 1-3 days on-site in Colorado Springs, CO required, some travel to client sites may be required | Active (or active within 24months) Secret Security Clearance required, can hold TS, The Information System Security Engineer III (ISSE III) serves as a key technical leader responsible for integrating cybersecurity across the full lifecycle of complex information systems. This role acts as the primary liaison between systems engineering teams and security compliance stakeholders, ensuring security requirements are effectively implemented without compromising mission or operational objectives., Security Architecture & Engineering * Design, develop, and implement secure architectures across multi-level systems, cloud environments (AWS), and on-premise networks * Integrate security controls into system design aligned with NIST 800-53 and DoD requirements Risk Management Framework (RMF) Leadership * Lead RMF lifecycle activities, including system categorization, control selection, implementation, and continuous monitoring * Tailor security controls based on system risk, mission needs, and operational constraints Assessment & Authorization (A&A) * Develop and maintain Body of Evidence (BoE) documentation, including: * System Security Plans (SSP) * Security Assessment Reports (SAR) * Plan of Action & Milestones (POA&M) Support assessment activities and coordinate with Authorizing Officials and assessors Vulnerability Management & System Hardening * Conduct vulnerability scans using tools such as Nessus, ACAS, and SCAP * Analyze findings, prioritize risks, and drive remediation efforts with engineering teams * Implement and validate system hardening in accordance with DoD and industry standards Stakeholder Engagement & Security Advisory * Serve as a trusted advisor to engineering teams and leadership on cybersecurity risks and mitigation strategies * Translate technical vulnerabilities into mission and business risk for senior stakeholders * Provide security guidance on system changes, architecture decisions, and engineering trade-offs, * Remain in a stationary position for extended periods of time. * Operate a computer, keyboard, and other office equipment using hands and fingers. * Communicate effectively in person, over the phone, and through electronic means. * Occasionally move about the office to access files, office equipment, and meeting spaces. * Lift and/or move up to 15 pounds as needed. * Maintain specific vision abilities, including close vision and the ability to adjust focus. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) - [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling) ## Related Articles - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)