Information System Security Engineer

Elevate Technology Group; Fairfax (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive base salary

Generous 401(k) contributions

Individual Benefits Account (IBA)

Medical, dental, vision

Generous paid time off

Life insurance

Tuition reimbursement

Flexible working hours in on-site环境

Job summary

Elevate Technology Group is seeking an Information System Security Engineer (ISSE) to operate in Fairfax, VA or Denver, CO. You will lead RMF/AT0 activities, build SSPs, and implement security controls across Linux environments with DevOps collaboration.

The role demands an Active TS/SCI clearance with CI Polygraph, extensive RMF/A&A experience, and hands-on Linux security expertise to support mission-critical DoD/IC programs.

Qualifications

• Active TS/SCI clearance with CI Polygraph is required.
• Experience developing and maintaining SSPs, POA&Ms, and security assessments.
• Strong RMF/A&A knowledge and ATO processes for DoD/IC environments.
• Hands-on Linux system administration experience and scripting.

Responsibilities

• Lead RMF activities including A&A and ongoing ATO maintenance.
• Develop, review, and maintain SSPs and accreditation docs.
• Implement security controls across Linux-based infrastructure, virtualized and bare-metal.
• Conduct vulnerability assessments, scanning, audits, and continuous monitoring.
• Collaborate with systems teams to remediate vulnerabilities and ensure compliance.
• Support system hardening, patching, configuration management, and log reviews.
• Evaluate architectures for IC requirements and provide security guidance.
• Coordinate security assessments and risk management across the lifecycle.
• Work with development and infra teams to embed security in design and operations.
• Maintain DoD/IC cybersecurity policy and standards compliance.

Skills

RMF/ATO processes

Linux/Unix expertise

Vulnerability management

Security accreditation knowledge

Education

Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Engineering

Tools

Kubernetes

Docker

Ansible

Puppet

Foreman

Nessus

Nmap

Rapid7

VMware

RHEL/Linux admin

Job description

Role: Information System Security Engineer (ISSE)

Location: Fairfax, VA or Denver, CO

Security Clearance: Active TS/SCI with CI Polygraph Required

We are working with an established organization supporting mission-critical programmes across the US Defense and Intelligence Community, who are looking to appoint an experienced Information System Security Engineer (ISSE) to join their technical security team in Fairfax, VA or Denver, CO.

This opportunity is suited to a technically proficient Security Engineer with extensive experience in ICD-503, Risk Management Framework (RMF), Assessment & Authorization (A&A), and Authority to Operate (ATO) processes, alongside a strong working knowledge of Linux-based infrastructure.

You will play a key role in implementing security controls, maintaining accreditation, and ensuring compliance across complex, mission-critical environments.

The position requires someone who can bridge the gap between cybersecurity compliance requirements and practical technical implementation, with the ability to understand, assess, and secure enterprise Linux systems.

Key Responsibilities

• Lead and support ICD-503 Risk Management Framework (RMF) activities, including Assessment & Authorization (A&A) and ongoing ATO maintenance.
• Develop, review, and maintain System Security Plans (SSPs), security control assessments, POA&Ms, and supporting accreditation documentation.
• Implement and maintain security controls across complex Linux-based infrastructure, including virtualized and bare-metal environments.
• Conduct vulnerability assessments, compliance scanning, security audits, and continuous monitoring activities.
• Work closely with Systems Administrators and Engineering teams to identify, remediate, and mitigate security vulnerabilities.
• Support system hardening, patch management, configuration management, and audit log reviews.
• Evaluate proposed system architectures and provide technical security guidance to ensure compliance with Intelligence Community requirements.
• Coordinate security assessments, remediation activities, and risk management processes throughout the system lifecycle.
• Collaborate with development and infrastructure teams to integrate security requirements into system design and operational processes.
• Maintain compliance with applicable DoD and Intelligence Community cybersecurity policies and standards.

Required Skills & Experience

• Active TS/SCI clearance with CI Polygraph, required.
• 10+ years of relevant experience in Information Systems Security Engineering, Information Assurance, or cybersecurity engineering.
• Extensive experience with ICD-503, including security accreditation, compliance documentation, and control implementation.
• Strong understanding of Risk Management Framework (RMF), Assessment & Authorization (A&A), and Authority to Operate (ATO) processes.
• Solid technical knowledge of Linux/Unix environments, ideally with previous hands-on Linux Systems Administration or Engineering experience.
• Experience developing and maintaining System Security Plans (SSPs), POA&Ms, and security assessment documentation.
• Knowledge of vulnerability management, continuous monitoring, security scanning, and remediation processes.
• Familiarity with NIST security frameworks, including NIST SP 800-37 and associated security controls.
• CompTIA Security+ CE certification or higher-level equivalent.
• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical discipline, highly preferred.
• Experience with Red Hat Enterprise Linux (RHEL) and enterprise Linux system administration.
• Exposure to cloud infrastructure, particularly AWS and cloud security architectures.
• Familiarity with Kubernetes, Docker, and containerised environments.
• Experience with infrastructure automation and configuration management tools, particularly Ansible, Puppet, or Foreman.
• Knowledge of vulnerability scanning tools including Nessus, Nmap, and Rapid7.
• Familiarity with VMware, virtualisation technologies, and enterprise infrastructure.
• Experience with Linux scripting, Bash, and system automation.

Benefits Package

• Competitive base salary, dependent on experience and education.
• Generous 401(k) retirement contributions (25%).
• Individual Benefits Account (IBA), providing additional flexibility towards benefits and paid time off.
• Comprehensive medical, dental, and vision coverage.
• Generous paid time off, with opportunities for up to 8 weeks depending on individual arrangements.
• Life insurance coverage.
• 100% tuition reimbursement for eligible educational programmes.
• Flexible working hours within a fully on-site environment.

We welcome applications from experienced Information System Security Engineers with a strong technical foundation who are looking to contribute to complex, security-critical programmes.