Information Systems Security Engineer

Koitecc Solutions; Tampa (FL); On-site; USD 110,000 - 140,000; Full time

Job summary

Koitecc Solutions in Tampa seeks an Information Systems Security Engineer to design, implement, and maintain secure information system architectures. The role focuses on risk assessment, security engineering, compliance, vulnerability management, security documentation, and supporting cybersecurity audits to meet regulatory requirements.

The candidate should have a Bachelor’s in CS/IT/Cybersecurity, 6+ years in cybersecurity, and strong RMF/NIST 800-53 knowledge.

Qualifications

• Bachelor's degree required in CS/IT/Cybersecurity or related field.
• 6+ years of cybersecurity or information assurance experience.
• Strong knowledge of RMF, NIST 800-53, and security engineering principles.
• Experience with security assessment tools (ACAS, Nessus, SCC, Splunk).
• Active DoD-style security clearance or eligibility, Top Secret/SCI preferred.
• Master's degree and Kubernetes/customer-facing consulting are a plus.

Responsibilities

• Design and implement secure architectures for information systems.
• Ensure security designs align with organizational goals and industry standards.
• Conduct security risk assessments and craft mitigation strategies.
• Integrate security controls throughout the SDLC.
• Collaborate with software, network, and systems teams to maintain secure configurations.
• Implement and manage encryption, firewalls, and access controls.
• Prepare documentation for security certifications, audits, SOPs, POA&Ms, and CM.

Skills

RMF

NIST 800-53

Security engineering

DoD security standards

Communication

Presentation skills

CISSP/CASP+/CEH/CompTIA Security+

Education

Bachelor's degree in CS/IT/Cybersecurity

Master's degree (preferred)

Tools

ACAS

Nessus

SCC

Splunk

Kubernetes

Job description

Job Summary

The Information Systems Security Engineer is responsible for designing, implementing, and maintaining secure information system architectures. The role focuses on risk assessment, security engineering, compliance, vulnerability management, security documentation, and supporting cybersecurity audits while ensuring systems meet organizational and regulatory security requirements.

Key Responsibilities

• Design and implement secure architectures for information systems.
• Ensure security designs align with organizational goals and industry standards.
• Conduct security risk assessments and recommend mitigation strategies.
• Integrate security controls throughout the System Development Life Cycle (SDLC).
• Collaborate with software developers, network engineers, and system administrators to maintain secure system configurations.
• Implement and manage security technologies such as encryption, firewalls, and access controls.
• Ensure compliance with security frameworks including NIST, ISO 27001, and FISMA.
• Prepare documentation for security certifications, audits, SOPs, POA&Ms, and configuration management.
• Lead remediation efforts for security audits, vulnerability assessments, and IAVM findings.
• Support cybersecurity compliance assessments (e.g., CMMC, DCSA).
• Monitor systems for compliance with organizational policies and regulatory requirements.
• Communicate security risks, compliance status, and recommendations to technical and non-technical stakeholders.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 6 years of cybersecurity or information assurance experience.
• Strong knowledge of RMF, NIST 800-53, and security engineering principles.
• Experience with security tools such as ACAS, Nessus, SCC, and Splunk.
• Knowledge of system hardening, encryption, access control, and network security.
• Strong analytical, problem-solving, communication, and presentation skills.
• Understanding of DoD security standards and compliance requirements.
• Relevant cybersecurity certification (CISSP, CASP+, CEH, Security+, or equivalent).
• Active Secret Security Clearance with Top Secret/SCI eligibility.
• Master's degree, Kubernetes experience, or customer-facing consulting experience is preferred.