Information Systems Security Engineer

SAIC; Reston (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

SAIC in Reston, Virginia seeks a highly motivated Information Systems Security Engineer (ISSM) to join our lead systems integrator team. The ISSE will evaluate vulnerabilities, deploy encryption, monitor breaches, and develop security policies to ensure data integrity for classified systems in support of the DIFC2 program.

The successful candidate will apply RMF and NIST 800-53 standards, coordinate with ISSMs and stakeholders, and ensure ATO readiness while adapting to evolving cybersecurity

Qualifications

• Bachelor's degree in Computer Science, Software Engineering or IT Engineering required.
• Minimum 9 years of cybersecurity experience required.
• U.S. Citizenship and active Top Secret with SCI eligibility required.

Responsibilities

• Develops and implements security designs to meet cyber security requirements for operating systems and software applications.
• Implements STIG requirements and SRG assessments for projects; conducts security testing and validation.
• Performs risk and vulnerability assessments and provides remediation strategies.
• Collaborates with ISSMs and stakeholders to address risks in compliance with customer standards.
• Monitors systems for compliance with government standards and evolving threats through scans and audits.
• Ensures Authorization to Operate (ATO) and lifecycle compliance for systems.

Skills

Security certifications

Communication skills

Risk management

Education

Bachelor's degree in Computer Science / Software Engineering / IT Engineering

Tools

Encryption technologies

Intrusion detection systems

Penetration testing tools

Job description

SAIC is seeking a highly motivated, detail-oriented, and experienced Information Systems Security Engineer (ISSM) to join our lead systems integrator team in Reston, Virginia. The ISSE will be responsible for evaluating system vulnerabilities, deploying firewalls and encryption, monitoring for breaches, and developing security policies to ensure data integrity and confidentiality. The ISSE will implement the cybersecurity posture and ensure compliance of classified information systems in support of Department of the Air Force's (DAF) Integrated Fires Command and Control (DIFC2) Program. The ideal candidate will have a strong technical background in information security and a thorough understanding of certification and accreditation process IAW NIST 800-53 and the Risk Management Framework (RMF). The successful candidate will have excellent communication, organizational and problem-solving skills. They will be expected to continually balance and adjust work priorities to meet short deadlines.

The position is ONSITE in Reston, VA.

Key Responsibilities

• Develops and implements security designs to ensure that the operating systems and software applications adequately address cyber security requirements.
• Implement and validate Security Technical Implementation Guide (STIG) requirements and/or perform SRG assessments for all development and implementation projects.
• Develop Security Test Procedures (STP), conducts self-assessments to verify compliance with required configuration guidance and support assessment and authorization testing and validation of security designs.
• Perform risk assessments, vulnerability assessments, and security audits to identify system vulnerabilities and provide remediation strategies.
• Collaborate with Information Systems Security Managers (ISSMs) and stakeholders to address risk in compliance with customer standards.
• Monitor systems for compliance with government standards and evolving cybersecurity threats through vulnerability scans, compliance audits, and configuration management.
• Ensure all systems meet Authorization to Operate (ATO) requirements and maintain compliance throughout the system lifecycle.
• Ensure that cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations.
• Read and interpret dataflow, network, and other developmental diagrams effectively.
• Write and utilize documentation.

• Current Certification such as CASP+, CCNP Security, CISA, CISSP, CCSP.
• Hands-on experience with security tools, including encryption technologies, intrusion detection systems, and penetration testing tools.
• Experience working with cross-functional engineering and security teams in classified environments.
• Communicate effectively with multiple stakeholders.
• Bachelor's Degree in Computer Science, Software Engineering or IT Engineering.
• 9 years of experience in Cybersecurity.
• U.S. Citizenship and an active Top Secret with SCI eligibility.