Information System Security Engineer (ISSE) Alexandria, VA Posted today

NANA Corp; Alexandria (VA); On-site; USD 180,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k)

PTO

Job summary

Akima Data Management (ADM) seeks an ISSE to design, engineer, and validate cybersecurity capabilities across DoW OIG information systems. You will ensure secure architectures, RMF authorization, and continuous monitoring aligned with NIST, DoD, and FedRAMP.

The role operates from Alexandria, VA, supporting the Cybersecurity Division. You will collaborate with engineering, operations, leadership, and external stakeholders to safeguard mission-critical systems and data while enabling secure,

Qualifications

• Active TOP SECRET with SCI clearance (required).
• Bachelor’s degree and 5–10 years of relevant experience, or 10+ years in lieu of a degree.
• IAM Level III certification (e.g., CGRC, CASP+ CE, CISSP, CISM) required; IAT Level III preferred.
• Strong understanding of NIST, FISMA, DoD, and organizational cybersecurity engineering frameworks.
• Vulnerability Management and Policy Writing Experience.
• Experience with security architecture, RMF engineering activities, and secure system design.
• Strong communication, analytical, and documentation skills.

Responsibilities

• Define, refine, and validate security requirements based on mission objectives, threat assessments, risk analyses, and applicable cybersecurity policies, standards, and frameworks.
• Design and implement secure system architectures, data flows, and engineering solutions aligned with NIST, DoD, FedRAMP, and Zero Trust principles.
• Develop security engineering artifacts, interface control documents, system security plans (SSPs), and technical documentation supporting RMF authorization and accreditation activities.
• Conduct security architecture reviews, threat modeling, vulnerability assessments, and security impact analyses for on-premises, cloud, and hybrid environments.
• Lead cloud vulnerability management efforts, including vulnerability scanning, assessment, prioritization, remediation tracking, and risk reporting across enterprise cloud platforms.
• Develop, review, and maintain cybersecurity policies, standards, procedures, and implementation guidance to ensure compliance with federal, DoD, and organizational requirements.
• Engineer and implement security controls, secure configurations, STIGs, SRGs, and baseline hardening requirements across systems, applications, cloud services, and networks.
• Perform technical control assessments, security testing, validation activities, and control effectiveness reviews to verify compliance and mitigate risk.
• Analyze security findings, recommend risk‑based mitigation strategies, and support POA&M development, remediation management, and closure activities.
• Integrate security requirements throughout the System Development Life Cycle (SDLC), ensuring secure coding, configuration management, and deployment practices.
• Conduct security assessments for system upgrades, patches, cloud migrations, integrations, and infrastructure changes to identify and mitigate potential risks.
• Design and support continuous monitoring capabilities, including automated vulnerability scanning, logging, alerting, and security analytics solutions.
• Provide technical support for incident response, forensic investigations, containment, eradication, and recovery operations.
• Assess emerging threats, vulnerabilities, cloud technologies, and adversary tactics to strengthen organizational security posture and resilience.
• Translate complex security engineering requirements into actionable guidance for system administrators, developers, architects, and operational teams.

Skills

NIST FISMA

RMF engineering

IAM Level III

Vulnerability management

Threat modeling

Security architecture

Security governance

Education

Bachelor’s degree

10+ years experience in lieu of degree

Job description

Akima Data Management (ADM) is seeking a highly skilled and mission‑driven Information System Security Engineer (ISSE) to design, engineer, and validate cybersecurity capabilities across Department of War (DoW) Office of Inspector General (OIG) information systems. The ISSE will ensure systems are architected, implemented, and sustained in alignment with federal, DoD, and organizational cybersecurity requirements. This role integrates security engineering into the full system lifecycle—requirements, design, development, testing, deployment, and continuous monitoring.

The ideal candidate brings deep technical expertise, strong understanding of cybersecurity engineering frameworks, and the ability to collaborate across engineering, operations, leadership, and external stakeholders. This position is essential to safeguarding OIG’s mission‑critical systems and ensuring secure, resilient, and compliant operations across the enterprise.

This role is based in Alexandria, VA, supporting the Cybersecurity Division. The ISSE plays a critical role in ensuring the confidentiality, integrity, and availability of DoW OIG’s systems and data while enabling mission success through secure, resilient engineering practices.

Responsibilities

• Define, refine, and validate security requirements based on mission objectives, threat assessments, risk analyses, and applicable cybersecurity policies, standards, and frameworks.

• Design and implement secure system architectures, data flows, and engineering solutions aligned with NIST, DoD, FedRAMP, and Zero Trust principles.

• Develop security engineering artifacts, interface control documents, system security plans (SSPs), and technical documentation supporting RMF authorization and accreditation activities.

• Conduct security architecture reviews, threat modeling, vulnerability assessments, and security impact analyses for on-premises, cloud, and hybrid environments.

• Lead cloud vulnerability management efforts, including vulnerability scanning, assessment, prioritization, remediation tracking, and risk reporting across enterprise cloud platforms.

• Develop, review, and maintain cybersecurity policies, standards, procedures, and implementation guidance to ensure compliance with federal, DoD, and organizational requirements.

• Engineer and implement security controls, secure configurations, STIGs, SRGs, and baseline hardening requirements across systems, applications, cloud services, and networks.

• Perform technical control assessments, security testing, validation activities, and control effectiveness reviews to verify compliance and mitigate risk.

• Analyze security findings, recommend risk‑based mitigation strategies, and support POA&M development, remediation management, and closure activities.

• Integrate security requirements throughout the System Development Life Cycle (SDLC), ensuring secure coding, configuration management, and deployment practices.

• Conduct security assessments for system upgrades, patches, cloud migrations, integrations, and infrastructure changes to identify and mitigate potential risks.

• Design and support continuous monitoring capabilities, including automated vulnerability scanning, logging, alerting, and security analytics solutions.

• Provide technical support for incident response, forensic investigations, containment, eradication, and recovery operations.

• Assess emerging threats, vulnerabilities, cloud technologies, and adversary tactics to strengthen organizational security posture and resilience.

• Translate complex security engineering requirements into actionable guidance for system administrators, developers, architects, and operational teams.

Qualifications

• Active TOP SECRET with SCI clearance (required).

• Bachelor’s degree and 5–10 years of relevant experience, or 10+ years in lieu of a degree.

• IAM Level III certification (e.g., CGRC, CASP+ CE, CISSP, CISM) required; IAT Level III preferred.

• Strong understanding of NIST, FISMA, DoD, and organizational cybersecurity engineering frameworks.

• Vulnerability Management and Policy Writing Experience.

• Experience with security architecture, RMF engineering activities, and secure system design.

• Strong communication, analytical, and documentation skills.

Job ID

2026-27178

Work Type

On-Site

Pay Range

$180K to $190K

Benefits

Regular - The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of other voluntary benefits. Paid Time Off (PTO) is offered to regular full-time and part-time employees.

Work Where it Matters

Akima Data Management (ADM), an Akima company, is not just another federal IT contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.

At ADM, the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.

For our shareholders, ADM provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.

For our government customers, ADM delivers agile and innovative cloud and IT services and solutions that enable mission dominance.

As an ADM employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.

We are an equal opportunity employer and comply with all applicable federal, state, and local fair employment practices laws. All applicants will receive consideration for employment, without regard to race, color, religion, creed, national origin, gender or gender-identity, age, marital status, sexual orientation, veteran status, disability, pregnancy or parental status, or any other basis prohibited by law. If you are an individual with a disability, or have known limitations related to pregnancy, childbirth, or related medical conditions, and would like to request a reasonable accommodation for any part of the employment process, please contact us at [e-mail] or 571-353-7053 (information about job applications status is not available at this contact information).