Information Systems Security Engineer

Cybersecurity Jobs; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Relocation Assistance

401k Contribution from Day 1

PTO + 11 Federal Holidays

Disability Insurance

Job summary

ENS Solutions in Reston, VA seeks an experienced Sr. Information Systems Security Engineer (ISSE) to safeguard containerized environments and DevSecOps pipelines. You will implement security controls, integrate security into CI/CD, and ensure RMF, NIST SP 800-53, ICD 503, and FedRAMP compliance.

You will monitor logs, respond to incidents, analyze threats with Splunk, and collaborate with platform engineers and ISSOs to enforce security standards across the lifecycle.

Qualifications

• Active TS/SCI with CI Poly security clearance.
• CISSP or equivalent certification to support DoD 8140 requirements.
• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 7+ years experience as a cybersecurity engineer focused on designing and implementing required security controls and performing continuous monitoring and auditing for compliance with security controls (examples include NIST SP 800-53, RMF, ICD 503, FISMA, FedRAMP).
• Strong skills specifying and implementing log collection into tools such as Splunk, including querying and analyzing aggregated logs to identify security-relevant anomalies and risks.
• Experience with security tools including Fortify, Acunetix, and Prisma Cloud.
• Proficiency in incident response, security incident handling, and forensic analysis techniques.
• Hands‑on experience implementing and validating security controls within a containerized/Kubernetes/DevSecOps IL5/IL6+ environment.
• Experience performing periodic security checks to support continuous monitoring aligned with the NIST Risk Management Framework.
• Strong understanding of network protocols, operating systems, and infrastructure components.
• Effective communication skills to convey complex technical concepts to both technical and non‑technical stakeholders.

Responsibilities

• Act as a security engineering SME for containerized environments, service mesh technologies, and microservices.
• Design, implement, and manage security controls for containerized workload solutions (image scanning, firewalls, IDS/IPS, endpoint protection, encryption, runtime protection, RBAC, network segmentation).
• Embed security into CI/CD and DevSecOps workflows, ensuring RMF, NIST SP 800-53, ICD 503, and FedRAMP requirements.
• Configure and optimize security monitoring and logging solutions and collaborate on container security tools such as Prisma Cloud or similar.
• Continuously monitor network traffic, system logs, and security alerts to detect and respond to incidents.
• Investigate anomalies and security breaches, mitigate risk, and develop incident response plans.
• Monitor threat intelligence feeds, perform threat analysis, and conduct risk assessments for emerging threats.
• Collaborate with cross-functional teams to enforce security policies and procedures across the lifecycle.
• Conduct regular security assessments of container orchestration platforms, microservices, and APIs to identify vulnerabilities and mitigations.
• Maintain documentation for security architecture processes, control implementations, configurations, and continuous monitoring strategies; produce reports.

Job description

Sr. Information Systems Security Engineer (ISSE) role focused on protecting digital assets and sensitive information across containerized environments and DevSecOps pipelines with DoD/IC-aligned compliance.

Responsibilities

• Act as a security engineering SME for containerized environments, service mesh technologies, and microservices.
• Design, implement, and manage security controls for containerized workload solutions, including:
  • Image scanning
  • Firewalls
  • Intrusion detection/prevention systems
  • Endpoint protection
  • Encryption mechanisms
  • Runtime protection
  • RBAC (role-based access control)
  • Network segmentation
• Embed security into CI/CD and DevSecOps workflows, ensuring compliance with RMF, NIST SP 800-53, ICD 503, and FedRAMP requirements.
• Configure and optimize security monitoring and logging solutions and collaborate on container security tools such as Prisma Cloud or similar.
• Continuously monitor network traffic, system logs, and security alerts to detect and respond to potential incidents.
• Investigate anomalies and security breaches, take actions to mitigate risk, and develop/implement incident response plans for breaches, incidents, and related security concerns.
• Monitor and assess threat intelligence feeds, perform threat analysis, and conduct risk assessments to identify emerging threats and vulnerabilities.
• Collaborate with cross-functional teams (platform engineers, ISSOs, developers, IT, software development, compliance) to establish and enforce security policies, standards, and procedures across the system lifecycle.
• Conduct regular security assessments of container orchestration platforms, microservices, and APIs to identify vulnerabilities and recommend mitigations.
• Maintain accurate documentation for security architecture processes, control implementation procedures, configurations, and continuous monitoring strategies; produce detailed reports on findings, incidents, and actions taken.

Requirements

• Active TS/SCI with CI Poly security clearance.
• CISSP or equivalent certification to support DoD 8140 requirements.
• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 7+ years experience as a cybersecurity engineer focused on designing and implementing required security controls and performing continuous monitoring and auditing for compliance with security controls (examples include NIST SP 800-53, RMF, ICD 503, FISMA, FedRAMP).
• Strong skills specifying and implementing log collection into tools such as Splunk, including querying and analyzing aggregated logs to identify security-relevant anomalies and risks.
• Experience with security tools including Fortify, Acunetix, and Prisma Cloud.
• Proficiency in incident response, security incident handling, and forensic analysis techniques.
• Hands‑on experience implementing and validating security controls within a containerized/Kubernetes/DevSecOps IL5/IL6+ environment.
• Experience performing periodic security checks to support continuous monitoring aligned with the NIST Risk Management Framework.
• Strong understanding of network protocols, operating systems, and infrastructure components.
• Effective communication skills to convey complex technical concepts to both technical and non‑technical stakeholders.

Technologies

• Containerized environments
• Service mesh technologies
• Microservices
• Image scanning
• Firewalls
• Intrusion detection/prevention systems
• Endpoint protection
• Encryption mechanisms
• Runtime protection
• RBAC
• Network segmentation
• CI/CD pipelines
• DevSecOps
• RMF
• NIST SP 800-53
• ICD 503
• FedRAMP
• Security monitoring and logging solutions
• Prisma Cloud
• Splunk
• Fortify
• Acunetix
• Container security tools
• Container orchestration platforms
• Kubernetes
• API
• FISMA
• NIST Risk Management Framework

Benefits

• Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS
• 401k Contribution from Day 1
• PTO + 11 Paid Federal Holidays
• Long & Short Term Disability Insurance
• Group Term Life Insurance
• Tuition, Certification & Professional Development Assistance
• Workers’ Compensation
• Relocation Assistance

Candidate AI Usage Policy

• AI tools are an important part of daily work at ENS Solutions, and the company is committed to responsible and ethical use.
• Candidates are not permitted to use artificial intelligence or other assistive tools during interviews, whether in person or virtual, unless explicit permission has been granted in advance.

Location: Reston, VA (onsite)

Minimum experience: 7 years