Information Assurance Security Engineer

D2 Technical Services; Springfield (VA); On-site; USD 100,000 - 130,000; Full time

Job summary

D2 Technical Services is seeking an Information Assurance Security Engineer to support our Intelligence Community customer in Springfield, Virginia. This role requires an active TS/SCI security clearance and expertise in policies, architecture, and incident response.

The engineer will draft security policies, guide system design, and respond to incidents, ensuring compliance and protection of critical information systems. Join us to contribute to impactful security initiatives.

Qualifications

• Active TS/SCI Security Clearance is required.
• Experience with drafting security policies and system security plans.
• Knowledge of network security infrastructure components.

Responsibilities

• Draft and review security policies and compliance documents.
• Guide system architecture from a security-first perspective.
• Conduct forensic analysis and response to security incidents.
• Engage with stakeholders and provide training on security practices.

Skills

Information Assurance

Incident Response

Risk Management Framework

Security Architecture

Job description

ACTIVE TS/SCI SECURITY CLEARANCE REQUIRED

Protect What Matters Most

Cyber threats don't take days off — and neither does the mission. As an Information Assurance Security Engineer supporting our Intelligence Community customer, you'll be a trusted voice on all things security: from policy and architecture to incident response and compliance. Your expertise will directly shape how systems are built, protected, and sustained in one of the most consequential environments in the country.

If you're a seasoned security professional who thrives at the intersection of policy, engineering, and operations — and you want your work to mean something — keep reading.

What You'll Be Doing

Policy, Compliance & Accreditation

• Draft and review information security policies, Memoranda of Agreement (MOAs), and System Security Plans (SSPs)
• Lead and coordinate all aspects of Certification & Accreditation (C&A) and Risk Management Framework (RMF) processes
• Review Plan of Action & Milestones (POA&Ms) and drive technical remediation and lien resolution
• Ensure IA hardware, software, and configurations comply with established security guides and A&A documentation

Architecture & Engineering

• Advise on system design and architecture from a security-first perspective — working with developers, engineers, and project managers to build protection in from day one
• Define, design, and evaluate information security systems and multi-agency integration security
• Perform advanced configuration and maintenance of network security infrastructure: firewalls, web/mail gateways, IDS, load balancers, and performance monitoring tools

Operations & Incident Response

• Conduct forensic traffic and log analysis to isolate issues and respond to analyst alerts
• Initiate protective and corrective measures when incidents or vulnerabilities are discovered
• Execute vulnerability remediation using ACAS security scans and related tools
• Respond to escalated troubleshooting requests and support O&S functions for network security infrastructure

Stakeholder Engagement & Training