INFORMATION SYSTEM SECURITY ENGINEER (ISSE) L4 - MUST HAVE ACTIVE TS/SCI CLEARANCE

NorthHill Technology Resources LLC; Lorton (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

NorthHill Technology Resources LLC is seeking an experienced Information System Security Engineer (ISSE) Level 4 for on-site work in Lorton, VA. The role requires active TS/SCI clearance and hands-on security engineering across DoD-classified environments, including RMF, SIEM, and vulnerability management.

You will design, implement, and sustain security controls, perform risk assessments, and generate documentation such as SSPs and engineering diagrams to support ATO readiness while

Qualifications

• Bachelor-level degree or equivalent experience in a related field.
• 8+ years in related technology with 5+ years in SCI/SAP environments.
• Active TS/SCI clearance and Security+ certification.

Responsibilities

• Design, implement, and maintain SecUre environments and RMF compliance.
• Perform security assessments and mitigation planning for DoD environments.
• Develop SSPs, engineering diagrams, and implementation guides.
• Monitor threats, automate reporting, and support ATO efforts.

Skills

Leadership experience

Security clearance

Strong communication

Education

Bachelor's degree in Computer Science, Engineering, Finance, Business, or related field

Tools

ACAS/Nessus

Trellix ePO

Active Directory Domain Services

Active Directory Federated Services

Active Directory Certificate Services

Windows Server Update Services

Splunk

STIG/SCAP

Azure Monitor / Log Analytics

Job description

INFORMATION SYSTEM SECURITY ENGINEER (ISSE) L4 - MUST HAVE ACTIVE TS/SCI CLEARANCE

• Lorton, VA
• Information Technology

One of our clients has an immediate need for aINFORMATION SYSTEM SECURITY ENGINEER (ISSE) - Level 4to work full-time on site at their client location in LORTON, VA. This position requires an active TOP SECRET with SCI level clearance.

One of our clients is searching for a Senior Information System Security Engineer (ISSE) to join their dynamic team of experts in Lorton, VA. In this role, you will provide engineering, administration, and sustainment for a suite of cybersecurity tools — including Splunk, Nessus/ACAS, Trellix ePO, and STIG/SCAP — supporting the development and sustainment of secure enclaves at the edge that deliver enterprise services and cyber network defense capabilities across the DoD. You will perform technical security assessments to identify vulnerabilities and non-compliance with Information Assurance standards, and recommend mitigation strategies to the ISSM/ISSO. Candidates should bring strong technical depth across identity, endpoint, and vulnerability management tooling, along with a background supporting classified DoD environments.

Key Responsibilities:

• Design, implement, and maintain distributed Splunk Enterprise environments, including RBAC, dashboards, reports, and alert capabilities.
• Administer Nessus Scanner/Manager and Security Center, developing custom scans, reports, and maintaining vulnerability plugins.
• Manage Trellix ePO endpoint security, including custom policies, software deployments, and security content updates.
• Design and implement security requirements for hybrid cloud environments to meet RMF requirements.
• Engineer unique solutions to support ongoing Cyber Threat and Cyber Defensive Operations.
• Automate threat assessment and reporting activities, and provide audit support.
• Analyze and report system and organizational security posture trends to the ISSM/ISSO.
• Assess access controls, configuration management processes, and security control effectiveness, reporting findings to the ISSM/ISSO.
• Implement security measures to resolve vulnerabilities, mitigate risks, and recommend system security changes as needed.
• Develop, maintain, and update technical documentation, including System Security Plans (SSPs), engineering diagrams, and implementation guides.
• Support ISSM/ISSO cybersecurity and RMF activities required to achieve and maintain an Authority to Operate (ATO).
• Monitor and investigate security breaches, and educate employees and clients on security procedures and programs.
• Receive enterprise cyber tickets and resolve via automation when possible.

Required Qualifications:

• Bachelor's degree in Computer Science, Engineering, Finance, Business, or a related field AND 3+ years of leadership experience in a relevant area of business, OR equivalent experience.
• 8+ years of demonstrated performance in related technology.
• 5+ years of related experience in an SCI/SAP environment.
• Security+ Certification.
• Active TS/SCI security clearance.

Advanced technical competency in:

• ACAS/Nessus
• Trellix/ePO
• Active Directory Domain Services
• Active Directory Federated Services
• Active Directory Certificate Services
• Windows Server Update Services
• Splunk
• STIG/SCAP
• Azure Monitor / Log Analytics

Preferred Qualifications:

• 5+ years of leadership experience in a relevant area of business.
• Technical certifications in Azure.
• DoD IAT Level III Certification (CISSP or CASP).
• Container security familiarity (Docker/Kubernetes/AKS/EKS).

Requirements:

• Must be within driving distance of Lorton, VA OR willing to relocate there (relocation packages available).
• Must be willing to work onsite.
• Strong written and verbal communication skills with excellent attention to detail and documentation accuracy.
• Ability to work independently and collaboratively in a mission-focused environment.
• Must be willing and able to travel up to 25%.
• Must possess an active TS/ SCI clearance or above.
• Please note that pursuant to a government contract, this specific position requires U.S. citizenship status.