> Markdown version of [/jobs/ext/203823-information-systems-security-engineer-isse](https://www.wearedevelopers.com/jobs/ext/203823-information-systems-security-engineer-isse). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Engineer (ISSE)

- **Company:** Evans & Chambers Technology
- **Location:** Arlington, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Agile Methodology, Amazon Web Services, Systems Engineering, JIRA, Bash Shell, Command-Line Interface, Software as a Service, Cloud Computing, CompTIA Security+, Cyber Security, Computer Programming, Computer Networks, Linux, DevOps, Information Security Management, Subnetting, Virtual Private Networks (VPN), Information Systems Security Architecture Professional, Python (Programming Language), Automation of Marketing, Networking Basics, Routing, Ansible, Software Engineering, Workflow Management Systems, Privacy Controls, Firewalls (Computer Science), Infrastructure Automation Frameworks, Information Technology, Terraform, Vulnerability Analysis
- **Published:** May 21, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=968924fe17f62d56

## About the Role

Do you have experience in Security compliance frameworks implementation?, Do you have a Bachelor's degree?, * 6-10 years of relevant ISSE or cybersecurity experience

 * Active TS/SCI with Polygraph
 * BS in a technical discipline or equivalent demonstrable experience
 * CISSP (Certified Information Systems Security Professional) or CompTIA Security+ preferred
 * Hands-on Linux experience, including proficiency with the command line
 * Scripting and programming experience in Bash, Python, or similar languages
 * Solid understanding of networking fundamentals - ports, routing, subnets, VPNs, firewalls, and troubleshooting
 * Experience working within Agile development teams and workflows
 * Strong working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-160, DISA/CIS STIGs, and CVE management
 * Experience with RMF workflow tools and processes
 * Strong written and verbal communication skills; able to clearly articulate findings and recommendations, and receptive to alternative approaches raised by team members

Desired Qualifications

 * Experience with Infrastructure as Code (IaC) tools such as Ansible, Terraform, or similar automation platforms
 * Prior experience working in a cloud-based environments

## Description

Evans & Chambers Technology (EC) is seeking an experienced Information Systems Security Engineer (ISSE) to support a technical development program centered on cloud-based applications and associated infrastructure operating in a highly secure, classified network environment. The ISSE will integrate directly into a multidisciplinary team that includes software developers, systems engineers, DevOps engineers, database administrators, and systems architects., Evans & Chambers partners with the US national defense community to create fully integrated, resilient, and innovative digital solutions that enable them to make smart decisions in real-time. We work with our customers on everything from conquering their data to improving and safeguarding IT infrastructure. Our ultimate goal? To enhance our nation's ability to identify, address, and act - no matter what challenges arise.

What a Typical Day Looks Like

 * Participate in daily Agile standup (scrum) meetings and provide status updates on assigned Jira issues
 * Attend ad-hoc Technical Exchange Meetings (TEMs) to assess security impacts of proposed architectural and system changes
 * Lead or assist with security scans; analyze and report on findings and their system impact
 * Review externally reported security findings (CVEs) and conduct impact analysis with recommended remediation paths
 * Evaluate upcoming system changes and new features for security implications during team design reviews

Primary Responsibilities

 * Identify, select, implement, and assess NIST SP 800-53 security and privacy controls
 * Develop and integrate secure configuration baselines per DISA STIGs and CIS benchmark guidelines
 * Contribute to the design of secure architectures and system designs
 * Ensure security requirements are embedded throughout the System/Software Development Life Cycle (SDLC)
 * Execute Continuous Monitoring (ConMon) activities in support of Assessment and Authorization (A&A) requirements
 * Create, review, and maintain A&A artifacts and supporting documentation
 * Perform security analysis and monitoring across a 100% AWS cloud-based environment
 * Conduct vulnerability scanning, analyze results, and develop remediation strategies and security implementations
 * Interface with Information System Security Managers (ISSMs) to support system accreditation efforts
 * Lead or participate in TEMs; document outcomes and brief management as needed


## Related Videos

- [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey)
- [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)