> Markdown version of [/jobs/ext/2694920-mission-critical-cyber-security-isso-opportunity](https://www.wearedevelopers.com/jobs/ext/2694920-mission-critical-cyber-security-isso-opportunity). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Mission Critical Cyber Security/Isso Opportunity - **Company:** Leading Path Consulting - **Location:** Warrenton, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Amazon Web Services, Applications Architecture, Application Layers, Systems Engineering, Microsoft Azure, CentOS, Cloud Computing Security, Cyber Security, Information Systems, Information Technology Consulting, Databases, System Configuration, Linux, Apache Hadoop, Integrated Development Environments, Internet Security, Intrusion Detection Systems, Network Security, Windows Servers, Network Architecture, Routing, NoSQL, Red Hat Enterprise Linux, ArcSight SIEM Tool, Cloudera, Security Information and Event Management, Software Systems, SQL Databases, Systems Architecture, Software Technical Review, Virtualization Technology, Software Vulnerability Management, Web Services, Network Switches, Network Routing, Google Cloud, Load Balancing, Cloud Platform System, QRadar, Firewalls (Computer Science), Containerization, Kubernetes, Information Technology, Cybercrime, Data Management, Splunk, Devsecops, Docker, Security Orchestration, Automation & Response, Elk Stack, Vulnerability Analysis - **Published:** September 3, 2026 - **Apply:** https://www.careerbuilder.com/job-details/mission-critical-cyber-security-isso-opportunity-ts-sci-w-poly-required-warrenton-va--434377c1-80c2-4ac9-9373-b7c54368121c ## About the Role Bachelor's degree in Cybersecurity, IT, or other related technical discipline; or the equivalent combination of education, technical training, or work/military experience Minimum ten (10) years applied experience or relevant degree plus five (5) years of Cybersecurity expertise with demonstrated ability to successfully shepherd IT projects of varying types through the authorization lifecycle REQUIRED KNOWLEDGE/SKILLS Candidate must demonstrate hands-on experience in all the following areas: Security & Compliance Expert-level experience with NIST Risk Management Framework (RMF) in federal government environments. Strong knowledge of: o NIST SP 800-53 o NIST SP 800-37 o NIST SP 800-30 Direct involvement in ATO packages, control implementation, and assessments. Hands-on experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, ELK Stack, ArcSight, Qradar). Demonstrated experience in security incident detection, analysis, and response. Proven ability to triage security alerts and determine criticality and impact. Infrastructure & Platforms (Hands-On) Networking (e.g., routing, switching, firewalls, load balancers, network security controls) Operating Systems: o Windows Server o Linux (RHEL, CentOS) Virtualization and storage platforms Databases (SQL and/or NoSQL) Data Platforms (e.g., HPCC, Hadoop/Cloudera) Web services, APIs, and application architectures Software development environments and CI/CD pipelines Security tooling (e.g., vulnerability scanners, endpoint protection, SIEM) Engineering Experience Security engineering and system hardening Vulnerability discovery and remediation Secure system design and architecture reviews Technical documentation supporting RMF compliance Experience in cloud environments (AWS, Azure, GCP, CI) within federal RMF contexts Experience with DevSecOps practices DESIRED SKILLS Hands-on experience with containerization and orchestration (Docker, Kubernetes) Hands-on experience with infrastructure-as-code Knowledge of federal overlays (e.g., DoD, FISMA High/Moderate) Relevant certifications (preferred, not required): o CISSP o CAP o CISM o Security+ o Cloud Security o Certified Ethical Hacker Experience with guiding and directing junior engineers and information systems security officer (ISSO) Experience with security orchestration, automation, and response (SOAR) platforms Background in threat hunting and proactive security monitoring Relevant incident response certifications Ideal Candidate Profile Proven hands-on Cyber Security Engineer SME, not policy-only or audit-only Comfortable working across network, system, platform, and application layers Deep understanding of how security controls are actually implemented and validated Experience in federal RMF-driven environments Able to bridge security, engineering, and compliance effectively Experienced in managing security incidents from detection through resolution Skilled at balancing immediate incident response needs with long-term security improvements Effective collaborator across organizational boundaries during high-pressure security, Operate independently as the technical authority for system security engineering. Demonstrate the ability to provide technical hands-on configuration, validation, an assessment of security controls. Translate RMF and NIST requirements into real-world technical implementations. Communicate complex technical security issues clearly to both technical and non- technical stakeholders. Maintain a strong balance between security compliance and operational practicality. Lead rapid response to security incidents with minimal guidance. Demonstrate strong analytical and troubleshooting skills under pressure during active security events. Effectively communicate incident status, impact, and remediation progress to technical and leadership audiences. Requirements QUALIFICATIONS Bachelor's degree in Cybersecurity, IT, or other related technical discipline; or the equivalent combination of education, technical training, or work/military experience Minimum ten (10) years applied experience or relevant degree plus five (5) years of Cybersecurity expertise with demonstrated ability to successfully shepherd IT projects of varying types through the authorization lifecycle REQUIRED KNOWLEDGE/SKILLS Candidate must demonstrate hands-on experience in all the following areas: Security & Compliance Expert-level experience with NIST Risk Management Framework (RMF) in federal government environments. Strong knowledge of: o NIST SP 800-53 o NIST SP 800-37 o NIST SP 800-30 Direct involvement in ATO packages, control implementation, and assessments. Hands-on experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, ELK Stack, ArcSight, Qradar). Demonstrated experience in security incident detection, analysis, and response. Proven ability to triage security alerts and determine criticality and impact. Infrastructure & Platforms (Hands-On) Networking (e.g., routing, switching, firewalls, load balancers, network security controls) Operating Systems: o Windows Server o Linux (RHEL, CentOS) Virtualization and storage platforms Databases (SQL and/or NoSQL) Data Platforms (e.g., HPCC, Hadoop/Cloudera) Web services, APIs, and application architectures Software development environments and CI/CD pipelines Security tooling (e.g., vulnerability scanners, endpoint protection, SIEM) Engineering Experience Security engineering and system hardening Vulnerability discovery and remediation Secure system design and architecture reviews Technical documentation supporting RMF compliance Experience in cloud environments (AWS, Azure, GCP, CI) within federal RMF contexts Experience with DevSecOps practices, Analysis Skills, Bridge Building, Civil Engineering, Commercial Off-the-Shelf (COTS), Communication Skills, Computer Security, Docker, Endpoint Security, Enterprise Protection, FISMA - Federal Information Security Management Act, Federal Government, Firewalls, Forensic Science, Fortune 500 Customers, Government, Government Off-the Shelf (GOTS), Hunting, Identify Issues, Incident Response, Information Technology & Information Systems, Information Technology Consulting, Internet Security, Intrusion Detection Systems, Intrusion Prevention Systems, Load Balancing, Machine Tool, Management Consulting, Microsoft Windows Server, Network Routing, Network Security, Network Switching, Operating Systems, Project/Program Coordination, Risk, Risk Analysis, Risk Management Framework (RMF), Root Cause Analysis, Security Analysis, Security Attacks, Security Compliance, Security Information and Event Management (SIEM), Security Monitoring, Security System Design, Sensitive Compartmented Information (SCI), System Architecture, Systems Engineering, Technical Leadership, Technical Operations, Technical Strategy, Technical Support, Technical Writing, Technical/Engineering Design, Top Secret Clearance, U.S. National Institute of Standards and Technology (NIST), United States Department of Defense (DoD), Vulnerability Scanners ## Description We are seeking a hands-on Cyber Security Engineer at the Subject Matter Expert (SME) level to lead and execute security engineering activities across complex, enterprise-scale environments. This role requires deep technical expertise across infrastructure, platforms, and applications, combined with expert-level, hands-on experience implementing the NIST Risk Management Framework (RMF) within federal government environments. The ideal candidate is a technical practitioner, not just an advisor-someone who can design, implement, assess, and secure systems end-to-ed while directly supporting system authorization, continuous monitoring, and risk-based decision-making. This role also serves as the technical focal point for all security incidents, leading triage, investigation, and resolution efforts in coordination with program and, Serve as the Cyber Security Engineer SME, providing hands-on security engineering across all system layers (infrastructure, platform, and application). Engineer, implement, and validate security controls in accordance with NIST SP 800-53 and RMF requirements. Lead and support RMF lifecycle activities (Categorize, Select, Implement, Assess, Authorize, Monitor). Perform security engineering for: o Network architectures and boundary protections o Windows and Linux operation systems o Storage and virtualization platforms o Databases and data platforms o Web services, APIs, and application stacks o Custom and COTS/GOTS software solutions Provide technical input to RMF artifacts, including: o System Security Plans (SSP) o Security Control Assessments (SCA) support o POA&Ms o Risk assessments and security impact analyses Collaborate with system owners, architects, developers, and operations teams to embed security into system design and implementation. Support ATO, re-authorization, and continuous monitoring activities. Identify security risks and provide practical, technically sound mitigation strategies. Participate in security reviews, technical design reviews, and vulnerability remediation efforts. Serve as technical point of contact for all security incidents affecting the program. Lead triage and analysis of new security alerts from SIEM, IDS/IPS, and other security monitoring tools. Drive remediation efforts for recurring security alerts, identifying root causes and implementing systemic fixes. Coordinate incident response activities between program stakeholders and enterprise security operations. Act as primary liaison between program teams and enterprise security for incident escalation, resolution, and reporting. Perform forensic analysis and technical investigations of security events. Document security incidents, response actions, and lessons learned. Develop and maintain runbooks and playbooks for common security incident types. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Leveraging Real time data in FSIs](https://www.wearedevelopers.com/videos/806-leveraging-real-time-data-in-fsis) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)