Cybersecurity Engineer (ISSE)

CAE; Tampa (FL); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Benefits package

Work-life balance

Professional development

Advancement opportunities

Job summary

CAE is seeking an Information Systems Security Engineer (ISSE) to provide ISSE/DevSecOps support to the C‑17 program. The role ensures traceability of security controls to system security requirements and integrates cybersecurity requirements across the ATS architecture.

The candidate will apply RMF processes, DoDI guidance, and DoD 8140‑style standards while coordinating with ISSOs and DoD customers in a multi‑enclave environment.

Qualifications

• AAS, BA, or BS in Engineering, CS, IS or related technical discipline.
• Active DoD Secret Clearance required.
• Certifications: CISSP, CISM, CASP, CEH, CHFI or DoD IAM‑II/III equivalents.
• 2–7 years of ISSE experience in DoD or regulated environments.

Responsibilities

• Provide ISSE support ensuring cybersecurity controls are integrated into architecture, development, configuration and operations.
• Trace cybersecurity controls to system security requirements and acquisition process artifacts.
• Capture and document information security requirements across ATS and maintain RMF artifacts.
• Collaborate across enclaves and architectures per RMF, DoDI 5000.02/5000.83 and DoD guidelines.

Education

AAS, BA, or BS in Engineering, Computer Science, Information Systems, or related technical discipline

Tools

Nessus Security Center

ePO

ACAS

SCAP/STIG tools

Evalu ate-STIG

Job description

Who We Are:

CAE Vision: Our vision is to be the worldwide partner of choice in defense and security, civil aviation, and healthcare by revolutionizing our customers' training and critical operations with digitally immersive solutions to elevate safety, efficiency and readiness.

CAE Defense & Security Mission: CAE's Defense and Security business unit focuses on helping prepare military customers to develop and maintain the highest levels of mission readiness.

CAE Values: Empowerment, Innovation, Excellence, Integrity and OneCAE make us who we are and we strive to make a difference in the world while helping each other succeed.

What We Have to Offer:

• Comprehensive and competitive benefits package and flexibility that promotes work-life balance
• A work environment where all employees are valued, respected and safe
• Freedom to succeed by enabling team members to deliver, take initiatives and make decisions
• Recognition, professional development, advancement and having fun!

This position is contingent on Contract Award.

Summary

The Information Systems Security Engineer (ISSE) will provide ISSE/DevSecOps support to the C‑17 program, collectively referred to as "ISSE support." The ISSE ensures traceability of security controls to system security requirements, supports the acquisition process, and integrates cybersecurity requirements into the full ATS architecture through disciplined security engineering practices. This role requires expert knowledge of DoD cybersecurity systems engineering guidance, RMF processes, acquisition security requirements, and integration activities across multiple enclaves and system architectures.

Essential Duties and Responsibilities

• Provide ISSE support in accordance with contract requirements, ensuring cybersecurity principles and controls are integrated into architecture, development, configuration, and operational processes.
• Trace cybersecurity controls to system security requirements documented in the acquisition process, ensuring proper alignment and verification.
• Capture, refine, and document information security requirements and integrate those requirements across the entire ATS through secure architecture, development, and configuration.
• Apply systems engineering processes and cybersecurity design principles referencing RMF, DoDI 5000.02, DoDI 5000.83, DoD TPP Guidebook, and NIST SP 800‑160.

C‑17 Program Cybersecurity Support

• Support the C‑17 Lead ISSO and C‑17 TS Cybersecurity Program by planning, documenting, and implementing required cybersecurity controls and security engineering activities.
• Collaborate with ISSOs to perform vulnerability analyses, update and maintain RMF artifacts, and support ongoing compliance activities across C‑17 systems.
• Assist in audit log reviews, ACAS scans, STIG assessments, and implementation of endpoint protection, host‑based security, and data‑loss prevention measures.
• Collaborate with network administrators to create and maintain PPSM entries for assigned systems in accordance with DISA requirements.
• Maintain authorized hardware and software baselines, working closely with configuration management teams across multiple enclaves.
• Assist with vulnerability scanning utilizing DoD‑approved tools such as Nessus Security Center and take part in supply‑chain evaluations of products and services integrated into the operational environment.

Qualifications & Education Requirements

• Education: AAS, BA, or BS in Engineering, Computer Science, Information Systems, or a related technical discipline.
• Certifications: Completion and maintenance of certifications and training in accordance with AFI 17‑303 and DAFMAN 17‑1305. Qualification per DoDD 8140.01, DoDD 8140.02, and DoD 8140.03 required.
• Acceptable baseline certifications: CISSP, CISM, CASP, CEH, CHFI, or DoD IAM‑II/III equivalents.
• Clearance: Active Secret Clearance is required.
• Experience: 2 to 7 years performing ISSE duties within DoD or equivalent regulated environments.
• Training: DISA ESS Administrator 201/301 and ePO 5.10 are preferred.

Preferred Qualifications

• Experience with eMASS, Trellix ePO, ACAS, SCAP/STIG tools, Evaluate‑STIG or similar tools.

Security Responsibilities

• Must comply with all company security and data protection / usage policies and procedures. Personally responsible for proper marking and handling of all information and materials, in any form. Shall not divulge any information, or afford access, to other employees not having a need‑to‑know. Shall not divulge information outside company without management approval. All government and proprietary information will be accessed and stored electronically on company provided resources.
• Incumbent must be eligible for DoD Personal Security Clearance.

Due to U.S. Government contract requirements, only U.S. citizens are eligible for this role.

Work Environment

This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fa