Information System Security Engineer

Cyber Defense Technologies; Westford (MA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Professional development

Job summary

Cyber Defense Technologies (CDT) in Westford, MA is seeking an experienced ISSE for a DoD program. The role is hands-on and on-site, providing security engineering, systems administration, and information assurance support to the program.

Candidates must have an active Secret clearance (Top Secret preferred) and 8+ years of deploying and managing secure systems. The position includes leadership responsibilities and collaboration with DISA/C5ISR to sustain compliance and readiness.

Qualifications

• 8+ years of experience deploying, configuring, maintaining and monitoring computer systems and networks.
• Experience leading a small team and communicating with stakeholders.
• Active DoD clearance: Secret required; Top Secret preferred.

Responsibilities

• Administer and upgrade classified virtual enterprises and related tech (VMware vSphere, Linux, Windows) to ensure readiness.
• Lead a small team of System Administrators and Information Security Engineers; provide site leadership.
• Deliver senior-level security engineering throughout the system life cycle.
• Perform continuous monitoring and security testing with Nessus/ACAS, Trellix, and Splunk.
• Develop mitigation and patching strategies for identified findings.
• Ensure changes are reviewed, documented, and compliant with RMF/NIST/NISPOM; coordinate with DISA/C5ISR.
• Maintain Trellix/ENS installations and upstream connections.

Skills

VMware vSphere

Enterprise Linux

Ansible/PowerShell automation

Windows Server/Workstation deployment

Security standards (RMF/NIST/NISPOM)

Education

CISSP, CCNA, Security+

RHCSA

DISA ACAS certification

Tools

Nessus/ACAS

Trellix

Splunk Enterprise

Job description

Overview:

CDT is seeking an experienced and skilled ISSE for a DoD program in Westford, MA. This position is hands-on technical and will provide on-site security engineering, systems administration, and information assurance support to the program.

Clearance Requirements:

An active Secret is required, Top Secret is preferred. Candidates who do not meet these clearance requirements will not be considered.

Responsibilities:

• Experience with administering, maintaining, implementing upgrades, and ensuring the readiness of several classified virtual enterprisesystems and corresponding technologies (e.g., VMware vSphere, Enterprise Linux, Cisco Systems (Switch, Router, NGFW), Palo Alto, Windows Server, Windows Workstation).
  • Knowledge of Cisco ISE/Forescout CounterACT NAC technologies preferred.
• Perform Site-Lead/Management duties that support the workflow and project goals for a small team of System Administrators and Information Security Engineers.
• Provide senior-level security engineering and development support throughout the system life cycle.
• Perform appropriate continuous monitoring and systems security testing using tools such as Nessus Security Center/ACAS, Trellix, and Splunk Enterprise.
• Provide mitigation solutions for identified findings and patching requirements.
• Ensure that proposed system changes are reviewed and that implemented system modifications do not adversely impact the security of the system. (e.g., Change Management)
• Maintain local Trellix/ENS installations and upstream connections.
• Work with upstream service providers such as DISA and C5ISR.
• Ensure that authorization/re-authorization support documentation is developed and maintained in conformance with applicable standards.
• Assist with the client’s progress towards completion of POA&Ms.

Technical Areas of Expertise:

• Performingenterprise software installations and upgrades.
• Enterprise Linux (Red Hat, OEL, Fedora) experience.
• Ansible or PowerShell automation experience preferred.
• VMware vSphere Experience (ESXi, vCenter, etc.)
• Windows Workstation and Server deployment and administration experience.
• RMF, NIST, and NISPOM requirements, configurations, settings, and documentation.
• Network engineering experience highly sought after.

Qualifications:

• 8+ years of experience in deploying, configuring, maintaining, and monitoring computer systems and networks.
• Previous team leadership experience.
• Experience with implementing highly technical solutions and reporting their importance to the organization and stakeholders.
• Technical certifications such as a CISSP, CCNA, Security +, RHCSA, or similar.
• DISA ACAS and Trellix Certifications preferred.

Why Join Cyber Defense Technologies?

At CDT, we offer a collaborative and inclusive work environment where your expertise in system engineering can help shape the future of cybersecurity and engineering solutions.

Compensation and Benefits:

• Competitive salary based on experience.
• Comprehensive benefits package, including health, dental, and retirement plans.
• Opportunities for professional development and career advancement.

CDT is committed to hiring and retaining a diverse workforce. We are an Equal Opportunity employer making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.