Information System Security Engineer (ISSE)

IPTA; Bath Township (OH); On-site; USD 120,000 - 170,000; Full time

Job summary

IPT Associates (IPTA) supports Wright-Patterson AFB with cybersecurity engineering, RMF authorization, and security testing. The team assesses information systems, implements controls, and maintains documentation to ensure proper authorization status and ongoing monitoring across DoD standards.

The role requires collaboration with program teams, security professionals, and developers to embed security into design and operations, with experience in eMASS and Xacta preferred.

Qualifications

• Bachelor's degree or higher in cybersecurity, computer science, information systems, engineering, or related field.
• Five+ years of experience in information system security engineering, cybersecurity engineering, RMF, or assessment and authorization.
• Knowledge of NIST SP 800-160/800-37/800-53 and CNSSI 1253; DoDI 8510.01; and Air Force cybersecurity policy.
• Experience analyzing security requirements and architectures and implementing, assessing, testing, and validating security controls.
• Experience developing RMF authorization artifacts and supporting evidence.

Responsibilities

• Assess information systems, architectures, and proposed changes for vulnerabilities and risk; advise on needed improvements.
• Apply system security engineering principles and DoD/Air Force/national standards throughout the system lifecycle.
• Support all RMF phases including categorization, control selection, assessment, authorization, and continuous monitoring.
• Develop and maintain System Security Plans, Security Assessment Reports, Plans of Action and Milestones, and authorization evidence.
• Conduct security control assessments using scans, audit logs, testing, and penetration testing when required.
• Analyze vulnerability results and recommend remediation; verify corrective actions.
• Develop and track Plans of Action and Milestones; maintain authorization artifacts through monitoring.
• Support eMASS and Xacta workflows and related security platforms to assess system status.
• Provide risk recommendations and authorization-status updates toAO and stakeholders.
• Collaborate with system owners, managers, cybersecurity personnel, engineers, and developers to integrate security into design and operations.
• Support incident response and coordinate corrective actions through Government channels.
• Assist with DoD Zero Trust guidance and multi-level security capabilities.

Skills

RMF

Vulnerability assessment

Security control implementation

NIST SP 800-160/800-37/800-53

CNSSI 1253

DoD policies

eMASS

Xacta

Security writing

Incident response

Education

Bachelor's degree in cybersecurity or related field

Tools

eMASS

Xacta

Job description

Wright-Patterson AFB

At IPT Associates (IPTA), we enjoy solving real-world problems with technology.

We work closely with our customers, teammates, experts, and partners to come up with practical solutions that make a difference. Whether it's a government or business organization, we focus on understanding the need and building something that works.

Our Team

At IPTA, everything starts with our people. We're big believers that when you invest in your team, great things happen. That's why we encourage learning, growth, and trying new things-even if you don't have all the answers yet.

Our culture is rooted in fierce determination, fearless integrity, and passionate service -but we also like to keep things collaborative, supportive, and down-to-earth.

We're Looking For People Who

• Are curious and excited about technology
• Like solving problems and figuring things out
• Can take initiative but also enjoy working with a team
• Want to keep learning, growing, and challenging themselves

If you're someone who's eager to jump in, learn something new, and make an impact - you'll fit right in here.

• This position is contingent upon contract award and the actual job description may vary based on specific contract requirements and organizational needs.*

Responsibilities

• Assess information systems, architectures, and proposed changes for vulnerabilities, control deficiencies, authorization risk, and impacts to the AFRL Science and Technology authorization boundary; advise the Authorizing Official (AO) on required improvements.
• Apply system security engineering principles and applicable DoD, Department of the Air Force, AFRL, NIST, and CNSSI standards throughout the system lifecycle.
• Support all Risk Management Framework phases, including categorization, control selection and implementation, assessment, authorization, and continuous monitoring.
• Develop and maintain authorization artifacts, including System Security Plans, Security Assessment Reports, Plans of Action and Milestones, authorization boundaries, inventories, ports, protocols, and services documentation, system diagrams, and supporting evidence.
• Conduct security control assessments using vulnerability and configuration scans, documentation and audit-log reviews, security testing, and penetration testing when required.
• Implement and validate Security Technical Implementation Guides; analyze vulnerability, compliance, source-code, dependency, and container-security results; recommend remediation; and verify corrective actions.
• Develop and track Plans of Action and Milestones through closure and maintain current authorization evidence through continuous monitoring.
• Support eMASS and Xacta workflows and use security information and event management, vulnerability-management, compliance, and authorization platforms to assess and report system status.
• Provide technically supported findings, risk recommendations, and authorization-status updates to the AO, designated representatives, Security Control Assessor, and other stakeholders.
• Collaborate with system owners, program managers, cybersecurity personnel, engineers, and developers to integrate security into system design and operations.
• Support incident response, including affected-system analysis, corrective-action coordination, and reporting through Government channels.
• Support multi-level security capabilities up to Top Secret/Sensitive Compartmented Information and assess systems against DoD and Department of the Air Force Zero Trust guidance.

Requirements

• Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related field.
• Five or more years of experience in information system security engineering, cybersecurity engineering, RMF, or assessment and authorization.
• Knowledge of NIST SP 800-160, 800-37, 800-53, and 800-53A; CNSSI 1253; DoDI 8510.01; and applicable Air Force cybersecurity policy.
• Experience analyzing security requirements and architectures and implementing, assessing, testing, and validating security controls.
• Experience developing and maintaining RMF authorization artifacts, including System Security Plans, Security Assessment Reports, Plans of Action and Milestones, authorization boundaries, inventories, system diagrams, and supporting evidence.
• Ability to assess vulnerabilities, architectural and residual risk, and control effectiveness and provide actionable recommendations to cybersecurity decision-makers.
• Knowledge of Security Technical Implementation Guides, vulnerability and configuration assessment, audit-log review, continuous monitoring, and remediation validation.
• Experience with eMASS, Xacta, or comparable governance, risk, compliance, or authorization-management platforms.
• Experience interpreting results from vulnerability-management, compliance, security information and event management, software-security, or container-security tools.
• Strong collaboration, technical writing, analysis, briefing, and communication skills.
• DoD-approved cyberspace workforce qualification and operating-system certification required for assigned duties under DoDM 8140.03.
• Ability to meet applicable privileged-user authorization requirements when assigned privileged access.
• Active Secret clearance and eligibility to obtain and maintain Top Secret/Sensitive Compartmented Information access when required.
• CISSP, CISM, CGRC, or an equivalent advanced cybersecurity certification preferred.

IPTA is an Equal Opportunity Employer. All employment decisions are based on individual merit, including qualifications, experience, performance, and business needs, consistent with applicable federal laws and federal contracting requirements. IPTA provides equal opportunity and utilizes merit-based principles to make employment-related decisions.

#clearance