Information Systems Security Engineer

Galapagos Federal Systems LLC is looking for an enthusiastic, well-qualified individual to fill the Information Systems Security Engineer position. This role offers the opportunity to work with a diverse and talented group of individuals committed to driving success.

The ideal candidates will provide cybersecurity engineering expertise across engineering and operations network solutions. The ISSE ensures strategic and technical adherence to all aspects of the Information Assurance (IA) program in accordance with U.S. Government and Intelligence Community requirements, including ICD 503, RMF, and applicable NIST and CNSSI guidance.

The ISSE is responsible for integrating security controls into system architectures, supporting Assessment and Authorization (A&A) activities, and collaborating with multidisciplinary security and program teams to ensure systems meet required security, compliance, and operational standards throughout the system lifecycle., The Information Systems Security Engineer will:

• Provide cybersecurity engineering support for engineering and operational network solutions
• Ensure compliance with Information Assurance (IA) and cybersecurity requirements mandated by ICD 503, DoD Instruction 8510.01 (RMF for DoD Systems), Applicable NIST and CNSSI publications
• Support and prepare Assessment and Authorization (A&A) documentation, artifacts, and procedures
• Engineer and implement security controls in alignment with NIST SP 800-53
• Participate in system categorization, control selection, implementation, assessment, and continuous monitoring
• Interface with IA team members, ISSOs and ISSMs, Other security disciplines (industrial, physical, special programs security), Program personnel and government security representatives
• Support certification and accreditation activities under ICD 503
• Ensure cybersecurity considerations are integrated into system design, deployment, and operations
• Maintain required cybersecurity and technical training to support assigned systems
• Provide technical guidance and recommendations to program leadership on security risks and mitigation strategies
• Experience supporting Intelligence Community systems
• Familiarity with multi-domain security environments
• Ability to operate effectively in high-compliance, mission-critical environments
• Strong attention to detail and risk-based decision making, Work may involve sitting or standing for extended periods of time and typing and reading from a computer screen. The candidate must have enough mobility, including bending, reaching, and kneeling, to complete daily duties in a prompt and efficient manner, and that may include lifting up to thirty pounds, as necessary.

The Information Systems Security Engineer must have:

• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance
• 5+ years of experience in information assurance, cybersecurity engineering, or Assessment & Authorization (A&A) supporting DoD or Intelligence Community (IC) systems.
• Demonstrated experience in information assurance and cybersecurity engineering within Department of Defense (DoD) or Intelligence Community (IC) environments
• Proven experience supporting Intelligence Community Directive (ICD) 503 Certification and Accreditation (C&A) activities
• Strong working knowledge of the Risk Management Framework (RMF) and applicable cybersecurity standards and guidance, including NIST SP 800-53 (Security and Privacy Controls), NIST SP 800-37 (Risk Management Framework), NIST SP 800-39 (Managing Information Security Risk), NIST SP 800-30 (Risk Assessment Guide), and CNSSI 1253 (Security Categorization and Control Selection)
• Experience developing, reviewing, and maintaining Assessment and Authorization (A&A) documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms)
• Familiarity with engineering and operational environments supporting classified information systems, * Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, Engineering, or a related technical discipline
• Equivalent experience may be substituted in lieu of a degree
• Must meet DoD 8140 education and certification requirements
• Must maintain required technical and cybersecurity training as defined by role and system assignment

Preferred

• CompTIA Security+ CE
• CISSP
• CAP (Certified Authorization Professional)
• CASP+
• CISM

• Medical, dental, vision, disability, and life insurance
• Flexible Spending Accounts
• 401(k)
• PTO
• Paid Parental Leave
• Tuition reimbursement
• Paid federal holidays, USD $160,000.00 - USD $170,000.00 /Yr.

Headquartered in Hawaii, Galapagos Federal Systems LLC, is an SBA-Certified NHO-owned 8(a) Small Business specializing in global information technology solutions. We deliver professional services in IT Design & Installation, Cybersecurity Engineering & Support, Application Integration & Development, Software & Hardware Engineering, Network & Systems Management, Information Systems Security, and Business Management Services.

Leveraging over 30 years of providing IT services to the federal & commercial market with projects found around the world, our team has innovative expertise in the development of a wide range of technological solutions. Galapagos Federal Systems LLC is an equal opportunity employer.

Our service commitment is simple - “Quality IT Solutions… On Time & On Budget.”