Senior Information Systems Security Engineer

We are seeking a highly experienced and motivated Senior Information Systems Security Engineer to join our team in Washington, DC. This role is critical to our organization’s mission, requiring expertise in designing, implementing, and maintaining robust security solutions to protect sensitive information and systems., * Develop and implement security strategies, policies, and procedures to safeguard organizational data and systems.

• Conduct vulnerability assessments, penetration testing, and risk analysis to identify and mitigate security threats.
• Manage and configure security tools and technologies, including firewalls, intrusion detection/prevention systems, and endpoint protection solutions.
• Collaborate with IT and development teams to integrate security best practices into system design and development lifecycles.
• Provide technical support and guidance to staff on security awareness and compliance requirements.
• Stay current on emerging security threats, trends, and industry standards to ensure proactive defense measures.
• Lead incident response efforts, including investigation, containment, eradication, and recovery of security breaches.
• Ensure compliance with relevant regulations, standards, and internal policies.

• Bachelor’s degree in Computer Science, Information Security, or a related field; Master’s degree preferred.
• Minimum of 5 years of experience in information systems security, with a strong focus on engineering and technical implementation.
• Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) certification highly desired.
• In-depth knowledge of operating systems (Windows, Linux), networking protocols, and cloud computing environments.
• Experience with security frameworks such as NIST, ISO/IEC 27001, and COBIT.
• Strong understanding of threat modeling, secure coding practices, and application security.
• Excellent analytical and problem-solving skills, with the ability to work independently and as part of a team.
• Outstanding communication and interpersonal skills, with the ability to convey complex technical concepts to non-technical stakeholders.

Preferred Qualifications:

• Experience with DevSecOps practices and tools.
• Knowledge of compliance requirements such as HIPAA, PCI-DSS, or GDPR.
• Familiarity with secure software development lifecycle (SDLC) methodologies.
• Experience working in a government or highly regulated industry.