Information Systems Security Engineer

Edgesource Corporation; Chantilly (VA); Hybrid; USD 190,000 - 210,000; Full time

Benefits offered by this job

Flexible PTO Policy + 11 Paid Holidays

Flexible Work Schedules (Remote / Hybø

Medical / Dental / Vision / FSA

401k Plan with Match

Tuition & Professional Development

Commuter Benefits

Bonus & Employee Referral Programs

Career Growth Opportunities

Job summary

Edgesource Corporation is seeking an Information Systems Security Engineer to deliver cybersecurity engineering and Assessment and Authorization support across a Sponsor portfolio, ensuring security requirements are integrated throughout the system lifecycle and authorization artifacts stay current. The role is based in Chantilly, VA with a hybrid work model.

The package includes USD 190,000–210,000 yearly compensation, plus benefits such as Flexible PTO, health coverage, 401k, and professional

Qualifications

• Active TS/SCI with Poly and capable of handling complex systems.
• Experience in information systems security engineering, security authorization, or information assurance for complex systems.
• Knowledge of security control implementation, risk assessment, vulnerability management, secure configuration, and continuous monitoring.

Responsibilities

• Define, document, and maintain cybersecurity and information assurance requirements for Sponsor systems and applications.
• Support Assessment and Authorization activities across the system lifecycle in line with Sponsor policy and RMF.
• Develop and maintain system security plans, control statements, architecture diagrams, risk assessments, evidence, and authorization artifacts.
• Coordinate with engineers and system owners to integrate security into system design and implementation.
• Review proposed changes for cybersecurity impact and coordinate vulnerability scanning and remediation tracking.
• Support continuous monitoring, audit preparation, and ongoing authorization activities.
• Track findings, risks, mitigations, exceptions, and Plans of Action and Milestones to closure.
• Review access controls, encryption, logging, and data flows to support compliance and risk management.
• Provide cybersecurity guidance during incident response, deployments, and operational changes.
• Maintain security documentation and evidence repositories and authorization status.
• Communicate risks, requirements, findings, and remediation priorities to stakeholders.
• Participate in design reviews and security working groups.

Skills

Active TS/SCI with Poly

Security engineering

Security authorization

Cybersecurity documentation

Stakeholder communication

Education

Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or related field

Job description

The Information Systems Security Engineer will deliver cybersecurity engineering and Assessment and Authorization support across a Sponsor portfolio, ensuring security requirements are integrated across the system lifecycle and authorization artifacts remain accurate and current.

Location and Work Model

Chantilly, VA (hybrid)

Compensation

USD 190,000 - 210,000 per yearly

Responsibilities

• Define, document, and maintain cybersecurity and information assurance requirements for Sponsor systems and applications.
• Support Assessment and Authorization activities across the system lifecycle in line with Sponsor policy and the applicable Risk Management Framework.
• Develop and maintain system security plans, control implementation statements, architecture diagrams, risk assessments, assessment evidence, and authorization artifacts.
• Coordinate with architects, engineers, developers, administrators, testers, and system owners to incorporate security into system design and implementation.
• Evaluate proposed changes to systems, software, infrastructure, networks, data, and configurations for cybersecurity impact.
• Coordinate vulnerability scanning, secure configuration assessments, remediation tracking, and validation of corrective actions.
• Support continuous monitoring, recurring security control assessments, audit preparation, and ongoing authorization activities.
• Track security findings, risks, mitigations, exceptions, and Plans of Action and Milestones through closure.
• Review access controls, authentication, authorization, encryption, logging, auditing, interfaces, data flows, and boundary protections to support compliance and risk management.
• Provide cybersecurity guidance during incident response, deployments, system transitions, and operational changes.
• Maintain security documentation, evidence repositories, assessment records, control mappings, and authorization status.
• Communicate cybersecurity risks, requirements, findings, and remediation priorities to technical and non-technical stakeholders.
• Participate in design reviews, technical exchanges, change-control activities, and security working groups.

Required Qualifications

• Active TS/SCI with Poly.
• Professional experience performing information systems security engineering, security authorization, or information assurance work for complex systems.
• Knowledge of security control implementation, risk assessment, vulnerability management, secure configuration, and continuous monitoring.
• Experience producing and maintaining cybersecurity documentation, control evidence, risk records, and authorization packages.
• Ability to collaborate with technical teams and translate security requirements into implementable engineering actions.
• Strong technical writing, organization, analysis, and stakeholder communication skills.
• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent relevant experience.

Nice to Have

• Experience supporting Intelligence Community, Department of Defense, or other federal Assessment and Authorization processes.
• Relevant cybersecurity certification such as Security+, CISSP, CGRC, CASP+/SecurityX, or equivalent.
• Experience securing cloud, hybrid, containerized, data-intensive, or DevSecOps environments.

Benefits

• Flexible PTO Policy + 11 Paid Holidays
• Flexible Work Schedules (Remote / Hybrid)
• Medical / Dental / Vision / Flexible Spending Account (FSA)
• 401k Plan with Match
• Tuition & Professional Development Support
• Commuter Benefits
• Bonus & Employee Referral Programs
• Career Growth Opportunities

Company Overview

For over 25 years, Edgesource Corporation has supported innovative technology services for the Department of War (DOW), Department of Homeland Security (DHS), Department of State (DOS), the U.S. Intelligence Community, Law Enforcement, and other federal, state, and commercial clients locally, nationally, and abroad.

Working at Edgesource

Edgesource is an ISO 9001:2015 certified and CMMI Level 3 appraised small business, specializing in technical solutions including software development, database services, enterprise networking, data center virtualization, and management support.

Equal Opportunity and Accommodation

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Edgesource is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities.

To request reasonable accommodation, contact the Recruiting Department by email at [e-mail] or by phone at [phone].