Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE)

Cybersecurity Jobs

Suitland (MD)

On-site

USD 108,000 - 195,000

Full time

8 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Competitive compensation

Health and Wellness programs

Income Protection

Paid Leave and Retirement

Job summary

Cybersecurity Jobs in Suitland, MD seeks a hands-on Information Assurance and Information Systems security engineering professional to secure, administer, harden, and maintain enterprise mission systems onsite.

Responsibilities include acting as the primary security engineering resource for enterprise infrastructure, performing vulnerability assessments and penetration testing, and supporting architecture reviews with security recommendations. Requires TS/SCI clearance and DoD RMF experience.

Qualifications

Bachelor’s degree in Cybersecurity or related field with 8+ years experience.
Master’s degree with 6+ years experience.
Active TS/SCI clearance in DISS with required program access.
DoD RMF, ICD 503, and NIST RMF experience.
IC/DoD/DISA/NAVINTEL security processes and A&A support.
Software development experience in Java/C/C++ and scripting.
Experience with SCAP-based tools and configurations.
Experience installing, configuring, testing, deploying, maintaining enterprise network based scanning tools (Trellix/ESS, ACAS, RedSeal, Evaluate STIG, SteelCloud ConfigOS, STIG Manager).
Unix (Solaris) and Windows hardening with STIGs.
Experience with CDS and cross-domain security practices.

Responsibilities

Act as a primary security engineering resource for enterprise infrastructure, supporting hands-on administration, configuration, security hardening, troubleshooting, and vulnerability remediation.
Research and evaluate cybersecurity tools, technologies, and methodologies to strengthen enterprise security.
Support architecture and engineering reviews with security recommendations for new capabilities and infrastructure changes.
Troubleshoot complex security issues across storage, networking, OS, authentication, and enterprise infra.
Perform vulnerability assessments, ethical hacking, and penetration testing to address risks.
Review and harden storage protocols and services (NFS, SMB/CIFS, iSCSI) and management interfaces.
Apply DISA STIGs, SRGs, vendor guidance, and industry best practices.
Configure and maintain secure admin access using SSH, HTTPS/TLS, RBAC, centralized authentication, least privilege.
Develop and deliver training on cybersecurity tools, technologies, and processes.

Skills

Security engineering

RMF DoD

NIST RMF

IC/DoD experience

Vulnerability assessment

Penetration testing

SCAP tooling

Java/C/C++

Unix admin

Windows admin

Education

Bachelor’s degree + 8+ years

Master’s degree + 6+ years

Tools

Trellix/ESS

ACAS

RedSeal

Evaluate STIG

SteelCloud ConfigOS

STIG Manager

Job description

Hands-on Information Assurance and Information Systems security engineering role to secure, administer, harden, and maintain enterprise mission systems in Suitland, MD.

Responsibilities

Act as a primary security engineering resource for enterprise infrastructure, supporting hands-on administration, configuration, security hardening, troubleshooting, and vulnerability remediation.
Research and evaluate cybersecurity tools, technologies, and methodologies to identify opportunities to strengthen enterprise security.
Support architecture and engineering reviews by providing security recommendations for new capabilities, technologies, and infrastructure changes.
Troubleshoot complex security issues spanning storage, networking, operating systems, authentication, and broader enterprise infrastructure.
Perform vulnerability assessments, ethical hacking, and penetration testing to identify and address security risks.
Review and harden storage protocols and services, including NFS, SMB/CIFS, iSCSI, and associated management interfaces.
Apply and validate DISA STIGs, SRGs, vendor security guidance, and industry security best practices.
Configure and maintain secure administrative access using technologies and principles such as SSH, HTTPS/TLS, RBAC, centralized authentication, and least privilege.
Develop and deliver training on cybersecurity tools, technologies, and processes.

Requirements

Education and experience: Bachelor’s degree in Cybersecurity, Electrical Engineering, Information Technology, Information Assurance, or related field with 8+ or 12+ years experience; or Master’s degree with 6+ or 10+ years experience.
Clearance: Active TS/SCI clearance in DISS with required program access.
Security engineering experience, including experience with DoD RMF, ICD 503, and/or the NIST Risk Management Framework.
Extensive experience with Intelligence Community (IC), DoD, DISA, NAVINTEL Cybersecurity, FLTCYBERCOM, and DoDIIS processes, tools, systems, reporting mechanisms, and requirements supporting Assessment and Authorization (A&A).
Software development experience using Java, C, C++, or other programming or scripting languages, including designing and developing host based and network based scanning tools.
Experience with SCAP (Security Content Automation Protocol) based tools and specifications.
Experience installing, configuring, testing, deploying, operating, and maintaining enterprise network based scanning and reporting tools such as Trellix/ESS, ACAS, RedSeal, Evaluate STIG, SteelCloud ConfigOS, and STIG Manager.
Extensive experience hardening modern Unix operating systems (e.g., Oracle Solaris 10/11 and RHEL) and Microsoft Windows environments using STIGs.
Extensive experience securing systems and software in accordance with IC, DoD, and industry security best practices.
Experience developing security controls, testing methodologies, and test procedures for systems, cloud based architectures, and Cross Domain Solutions (CDS).
Demonstrated proactive, results-oriented approach and ability to build effective customer and team relationships.
DoD 8140 IAM Level III approved baseline certification such as CISSP or SecurityX.