> Markdown version of [/jobs/ext/3040178-information-system-security-engineer](https://www.wearedevelopers.com/jobs/ext/3040178-information-system-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Engineer

- **Company:** Booz Allen Hamilton Inc.
- **Location:** McLean, VA, United States
- **Experience:** Expert
- **Salary:** $99,000.0 - $225,000.0
- **Contract:** Permanent contract
- **Skills:** Xacta, Amazon Web Services, Microsoft Azure, Cyber Security, Identity and Access Management, Information Security Management, Network Security, SAP (Applications), Systems Architecture, Splunk
- **Published:** September 23, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9186720/information-system-security-engineer

## About the Role

* 8+ years of experience as an ISSO, ISSM, ISSE or SCA supporting classified programs
 * Experience supporting RMF activities, including documentation in tools like EMASS, SNOW or Xacta
 * Experience building or maintaining classified networks such as SIPRNet or CWAN
 * Ability to build and review SPLUNK dashboards, correlation searches and audit analysis
 * Ability to decompose RMF security requirements such as DoD JSIG, DAAG, or ICD-503 into technical solutions
 * Active TS/SCI clearance; willingness to take a polygraph exam
 * Bachelor's degree
 * IAM Level III certification including CISSP, GSLC, or CISM

Nice If You Have:

 * Experience with DoD cloud environments, such as Azure or AWS IL5 / IL6
 * Experience with CORA and mission impact processes
 * CCSP, CASP+, cloud or network security certification s

## Description

You will lead cybersecurity engineering efforts across the full system lifecycle for DoD collateral, SAP and SCI environments. This role ensures security requirements are integrated into system architectures, designs, develop ment, testing, and sustainment activities, and supports accreditation under the Risk Management Framework ( RMF ) and JSIG.

How You'll Contribute:

 * Integrate and refine cybersecurity requirements within system designs and architecture.
 * Conduct security architecture reviews, threat modeling, and technical risk assessments.
 * Develop and maintain security engineering artifacts such as STIG checklists, control t race ability, or architecture diagrams.
 * Assess system compliance, evaluate design alternatives, and provide mitigation recommendations.
 * Support secure enclave integration, including SIPRNet architecture, boundary defenses, and Type 1 crypto devices.
 * Analyze risks asso cia ted with emerging tools, technologies, and processes.
 * Collaborate with ISSOs, ISSMs, SCAs, and program stakeholders throughout system develop ment.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)