> Markdown version of [/jobs/ext/2638190-information-system-security-engineer](https://www.wearedevelopers.com/jobs/ext/2638190-information-system-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Engineer

- **Company:** Booz Allen Hamilton Inc.
- **Location:** McLean, VA, United States
- **Experience:** Expert
- **Salary:** $99,000.0 - $225,000.0
- **Contract:** Permanent contract
- **Skills:** Xacta, Amazon Web Services, Microsoft Azure, Cloud Computing, Cyber Security, Identity and Access Management, Information Security Management, Network Security, Systems Development Life Cycle, SAP (Applications), Systems Architecture, Cloud Platform System, Splunk
- **Published:** August 2, 2026
- **Apply:** https://justjobs.com/main/sendform/8/8/28176/1/17796774?backUrl=%2Fcareer%2F17796774%2FInformation-System-Security-Engineer-Virginia-Mclean

## About the Role

* 8+ years of experience as an ISSO, ISSM, ISSE or SCA supporting classified programs
 * Experience supporting RMF activities, including documentation in tools such as EMASS, SNOW or Xacta
 * Experience building or maintaining classified networks such as SIPRNet or CWAN
 * Ability to build and review SPLUNK dashboards, correlation searches, and audit analysis
 * Ability to decompose RMF security requirements such as DoD JSIG, DAAG, or ICD-503 into technical solutions
 * Active TS/SCI clearance; willingness to take a polygraph exam
 * Bachelor's degree
 * IAM Level III Certification, including CISSP, GSLC, or CISM Certification

Nice If You Have:

 * Experience with DoD cloud environments such as Azure or AWS IL5/IL6
 * Experience with CORA and mission impact processes
 * CCSP, CASP+, Cloud or Network Security Certifications

## Description

You will lead cybersecurity engineering efforts across the full system lifecycle for DoD collateral, SAP, and SCI environments. This role ensures security requirements are integrated into system architectures, designs, development, testing, and sustainment activities, and supports accreditation under the Risk Management Framework (RMF) and JSIG.

What You'll Work On:

 * Integrate and refine cybersecurity requirements within system designs and architecture.
 * Conduct security architecture reviews, threat modeling, and technical risk assessments.
 * Develop and maintain security engineering artifacts such as STIG checklists, control traceability, or architecture diagrams.
 * Assess system compliance, evaluate design alternatives, and provide mitigation recommendations.
 * Support secure enclave integration, including SIPRNet architecture, boundary defenses, and Type 1 crypto devices.
 * Analyze risks associated with emerging tools, technologies, and processes.
 * Collaborate with ISSOs, ISSMs, SCAs, and program stakeholders throughout system development.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)