Information Systems Security Engineer

Cyberjobs; Fort Meade, Northern (MD, KY); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Everforth ECS in Fort Meade, MD is seeking an Information Systems Security Engineer to lead security architecture hardening, vulnerability mitigation, and continuous RMF accreditation for multi-tenant systems.

The role covers implementing security controls across hybrid compute infrastructure, interfacing with FVEY partners, ISSMs/ISSOs, and defense personnel to ensure data flows, boundary defenses, and identity federation adhere to rigorous DoD baselines and zero-trust principles.

Qualifications

• U.S. citizenship and active DoD security baselines knowledge.
• Experience implementing RMF/docs artifacts and zero-trust models.
• Hands-on Linux server security and vulnerability management.

Responsibilities

• Design, enforce, and audit boundary security mechanisms and cross-domain controls.
• Hardening of Linux (RHEL) and Windows platforms, VDI and virtualization stacks.
• Run automated vulnerability scans, analyze CVEs, and drive remediations.
• Produce RMF artifacts (SSPs, SARs, ICDs) and collaborate with architects.
• Coordinate with FVEY partners and stakeholders on security posture.

Skills

Problem solving

Communication

Decision making

Education

Bachelor's degree with 5+ years experience

Master's degree with 3+ years experience

Tools

ACAS/Nessus

STIG/SCAP tools

OpenSCAP

SELinux

Kubernetes (K8s)

Job description

Everforth ECS is seeking an Information Systems Security Engineer to work in our Fort Meade, MD office.

The Information Systems Security Engineer willlead security architecture hardening, vulnerability mitigation, and continuous accreditation for multi-tenant systems operating within a Combined Information Environment (CIE) and Mission Partner Environment (MPE).

In this role, you will be responsible for defining, implementing, and validating technical security controls across hybrid compute infrastructure composed of enterprise virtual machines, container orchestration clusters, and virtual desktop delivery pipelines. You will interface directly with Five Eyes (FVEY) coalition partners, systems architects, ISSMs/ISSOs, and operational defense personnel to ensure that all data flows, boundary enforcement points, and identity federation services adhere to rigorous DoD security baselines, zero-trust principles, and Risk Management Framework (RMF) standards.

Primary Responsibilities:

• Multi-Domain & Enclave Boundary Defense: Design, enforce, and audit boundary security mechanisms, network access control policies, and cross-domain controls isolating mission-specific enclaves while facilitating secure multilateral information sharing among FVEY mission partners.
• Virtualization & Hypervisor Security: Apply and validate DISA Security Technical Implementation Guides (STIGs) and hardening benchmarks across enterprise hypervisors (VMware vSphere/ESXi), virtual machines, management planes (vCenter), and software-defined storage backends.
• Linux & Endpoint System Hardening: Maintain baseline configuration compliance and host-based security across Red Hat Enterprise Linux (RHEL) server platforms, Windows infrastructure, and enterprise Virtual Desktop Infrastructure (VDI) (VMware Horizon / Citrix), mitigating vulnerabilities across shared and non-persistent virtual pools.
• Continuous Monitoring & Vulnerability Management: Execute automated vulnerability scanning (e.g., Trellix, ACAS), analyze Common Vulnerabilities and Exposures (CVEs), generate Plan of Action and Milestones (POA&Ms), and engineer automated or scripted remediation actions across VM and VDI fleets.
• Accreditation & Documentation: Translate complex infrastructure topologies and system data flows into comprehensive RMF accreditation artifacts (System Security Plans [SSPs], Security Assessment Reports [SARs], Interface Control Documents [ICDs]). Collaborate with Systems Architects to evaluate architectural models (Visio / Cameo SysML) for cybersecurity posture and zero-trust compliance.
• Other duties, as assigned.

Salary 120,000-150,000

Qualifications

• U.S. Citizen.
• Active Secret security clearance.
• Bachelor's degree with 5+ years of progressive experience in cybersecurity engineering, systems security, or security architecture (Mid to Senior level). Alternatively, a Master's degree with 3+ years of experience.
• DoD 8570/8140 Baseline: Active IAT Level III or IAM Level II/III certification (e.g., CISSP, CASP+ CE, CISM, or equivalent).
• Linux & Server Security: Strong hands-on experience hardening and auditing Red Hat Enterprise Linux (RHEL) platforms via DISA STIGs, SCAP tools, OpenSCAP, and SELinux enforcement.
• Virtualization & VDI Security: Practical experience securing virtualized infrastructure (VMware ESXi, vCenter, vSAN) and enterprise VDI deployments supporting multi-classification or multi-tenant desktop access.
• Container Security Concepts: Working knowledge of securing containerized environments and Kubernetes (K8s) deployments (runtime security, image scanning, network policies, RBAC, and secrets management).
• Vulnerability Analysis: Demonstrated expertise with ACAS/Nessus, STIG Viewer, and CVE lifecycle management (triage, exploitation risk analysis, and patch remediation).
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).