Information System Security Engineer

Omniscius; Lorton (VA); On-site; USD 120,000 - 165,000; Full time

Job summary

Omniscius seeks an experienced Information System Security Engineer (ISSE) for our Lorton, VA team. The role focuses on secure enclave development, enterprise cyber services, and defensive cyber operations.

You will assess security, engineer solutions, automate monitoring, and advise leadership on risk and mitigation. Ideal candidates have hands-on with ACAS, ePO, Splunk, STIG/SCAP, Azure services, Entra ID, and DoD cybersecurity controls, plus 3+ years of leadership in cybersecurity programs.

Qualifications

• Active TS/SCI clearance required.
• Bachelor's degree or 10+ years of equivalent experience.
• 5–8 years of professional cybersecurity experience.
• Leadership experience in cybersecurity projects.
• Experience configuring and sustaining cloud security services.

Responsibilities

• Perform and review technical security assessments of computing environments to identify vulnerabilities, risks, and compliance gaps.
• Engineer cybersecurity solutions supporting Cyber Threat and Defensive Cyber Operations.
• Configure, deploy, integrate, and sustain cybersecurity tools within cloud environments.
• Configure Microsoft Entra ID and Azure security services for ATO requirements.
• Automate security monitoring, threat assessment, compliance, and reporting.
• Analyze security posture trends and communicate findings to ISSM/ISSO.
• Recommend cybersecurity controls and mitigation strategies.
• Implement security controls per DoD policies and standards.
• Apply security engineering principles for CIA and non-repudiation.
• Plan system modifications from exercises and vulnerability testing.
• Evaluate risks and mitigation during certification and testing.

Skills

Leadership

Security assessments

Threat monitoring

Cybersecurity risk management

DoD compliance knowledge

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering

10+ years experience in lieu of degree

Active TS/SCI security clearance

Tools

ACAS

Nessus

Splunk

STIG/SCAP

Microsoft Entra ID

Azure

Azure Automation

Active Directory

YUM

ePO

Job description

Our client is seeking an experienced Information System Security Engineer (ISSE) to join our team in Lorton, Virginia.

The ISSE will support the development and sustainment of secure mission enclaves while providing enterprise cybersecurity services and cyber network defense capabilities. This position is responsible for conducting technical security assessments, engineering secure solutions, automating defensive cyber activities, and advising technical and program leadership on cybersecurity risks and mitigation strategies.

The ideal candidate will have hands‑on experience with technologies such as ACAS, ePO, Splunk, STIG/SCAP, Microsoft Azure, Entra ID, Active Directory, Azure Automation, and YUM, along with a strong understanding of DoD cybersecurity requirements and security engineering principles.

Key Responsibilities

• Perform and review technical security assessments of computing environments to identify vulnerabilities, risks, and compliance gaps.

• Engineer cybersecurity solutions supporting Cyber Threat and Defensive Cyber Operations.

• Configure, deploy, integrate, and sustain cybersecurity tools such as ACAS, ePO, Splunk, STIG/SCAP, and YUM within cloud environments.

• Configure Microsoft Entra ID and Azure security services and tools in support of Authorization to Operate (ATO) requirements.

• Automate security monitoring, threat assessment, compliance, and reporting activities.

• Analyze system and organizational security posture trends and communicate findings to the ISSM and ISSO.

• Recommend cybersecurity controls, countermeasures, and mitigation strategies based on evolving threats and identified vulnerabilities.

• Implement security controls in accordance with applicable DoD cybersecurity policies and standards.

• Apply security engineering principles related to confidentiality, integrity, availability, authentication, and non‑repudiation.

• Recommend and plan system modifications based on cybersecurity exercises, assessments, vulnerability testing, and security testing results.

• Evaluate identified risks and deficiencies and recommend appropriate mitigation or risk‑acceptance strategies during certification and testing activities.

• Support the development, security, and sustainment of secure mission enclaves and enterprise cyber defense capabilities.

Required Qualifications

• Active TS/SCI security clearance.

• Active IAT/IAM/IASAE Level III certification, such as:

  • CISSP

  • CISM

  • CASP+ / SecurityX

  • Other qualifying DoD 8570/8140 Level III certification

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related technical field with 5–8 years of demonstrated professional experience.

• In lieu of a bachelor's degree, 10+ years of equivalent professional experience may be considered.

• Minimum 3 years of leadership experience.

• Demonstrated experience configuring, deploying, and sustaining cybersecurity tools within a cloud environment.

• Demonstrated experience configuring and provisioning cloud security services and tools.

• Hands‑on experience configuring Microsoft Entra ID.

• Experience performing cybersecurity assessments and identifying technical vulnerabilities and compliance deficiencies.

• Knowledge of DoD cybersecurity requirements, security controls, and risk management practices.

Preferred Qualifications

• 5+ years of leadership experience within cybersecurity or a related technical discipline.

• Microsoft Azure technical certifications.

• Hands‑on experience with Azure VPN Gateway.

• Experience with Azure Monitor and Log Analytics.

• Experience implementing and managing Azure security tools and services.

• Experience with cybersecurity automation and security monitoring.

• Experience supporting ATO, RMF, STIG, SCAP, vulnerability management, and DoD cybersecurity compliance activities.

Technical Skills

• Microsoft Azure

• Microsoft Entra ID

• Active Directory

• ACAS / Nessus

• Splunk

• McAfee/Trellix ePO

• STIG / SCAP

• Azure Automation

• Azure Monitor

• Log Analytics

• Azure VPN Gateway

• Vulnerability Management

• Cybersecurity Automation

• RMF / ATO

• DoD Cybersecurity Compliance

Additional Requirements

• Must reside within driving distance of Lorton, VA or be willing to relocate.

• Must be willing to work onsite.

• Must be willing and able to travel up to 10%.

• Pursuant to the requirements of the government contract, this position requires U.S. citizenship.