Information Systems Security Engineer 1

Columbia Technology Partners; Corridor North (MD); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical plans

Vision and Dental

401k

PTO and Leave

Career growth stipend

Life and Disability Insurance

Profit Sharing

Referral bonus

Job summary

Columbia Technology Partners is seeking an Information Systems Security Engineer 1 to support secure system design, development, and implementation across complex computing and network environments.

The role focuses on identifying security risks, compliance with standards, and embedding security throughout the system lifecycle. RMF, A&A, and continuous monitoring experience are essential, with DoD 8570 IASAE II certification preferred.

Qualifications

• Bachelor's degree in Computer Science, Information Assurance, or related field; 4 additional years of experience may substitute.
• Minimum 7 years of experience as an ISSE or in a related role.
• DoD 8570 IASAE Level II certification (or equivalent).
• Experience with RMF, including A&A processes, ATOs, and continuous monitoring.
• Hands-on RMF tools, NIST 800-53/800-37, vulnerability scanning, STIG implementation, and security control validation.

Responsibilities

• Conduct technical security assessments to identify vulnerabilities, compliance gaps, and risks.
• Define and validate system security requirements and contribute to secure system design.
• Design, develop, and integrate security solutions across networks, systems, and enclave environments.
• Collaborate with systems engineers and architects to incorporate security controls into system architectures.
• Support risk identification, analysis, and mitigation throughout the system lifecycle.
• Participate in RMF-based security planning, Assessment & Authorization (A&A), and system accreditation efforts.
• Develop, maintain, and validate RMF artifacts, including security control traceability, boundary definitions, and authorization packages.
• Perform security control assessments aligned to NIST SP 800-53 and NIST 800-37.
• Execute continuous monitoring activities, including vulnerability remediation, compliance validation, and reporting.
• Conduct STIG implementation, patch management, and technical validation activities.
• Analyze scan results, perform false positive validation, and ensure timely remediation of findings.
• Utilize RMF and security compliance tools (XACTA, LATTEART, BISCOTTI, WATCHCAT, STE) to manage authorization data and workflows.
• Review and maintain system security documentation to ensure completeness, accuracy, and audit readiness.
• Support incident handling, auditing, configuration control, and change management processes.
• Work with customers and cross-functional teams to meet operational and security objectives.

Skills

RMF

NIST 800-53/800-37

Vulnerability scanning

STIG implementation

Security controls

A&A processes

Continuous monitoring

DOD 8570 IASAE II

Education

Bachelor's degree in Computer Science, Information Assurance, or related field

Tools

XACTA

LATTEART

BISCOTTI

WATCHCAT

STE

Job description

Description

Columbia Technology Partners is seeking an Information Systems Security Engineer 1 to support the design, development, and implementation of secure systems across complex computing and network environments. This role focuses on identifying security risks, ensuring compliance with established standards, and integrating security throughout the system lifecycle.

The ideal candidate will collaborate with engineering teams and stakeholders to embed security into system architecture, support risk management activities, and contribute to system authorization efforts in mission‑driven environments.

This position requires hands‑on experience with the Risk Management Framework (RMF), system authorization processes, and continuous monitoring activities, including the use of industry‑standard RMF and vulnerability management tools.

Key Responsibilities

• Conduct technical security assessments to identify vulnerabilities, compliance gaps, and risks
• Define and validate system security requirements and contribute to secure system design
• Design, develop, and integrate security solutions across networks, systems, and enclave environments
• Collaborate with systems engineers and architects to incorporate security controls into system architectures
• Support risk identification, analysis, and mitigation throughout the system lifecycle
• Participate in RMF-based security planning, Assessment & Authorization (A&A), and system accreditation efforts
• Develop, maintain, and validate RMF artifacts, including security control traceability, boundary definitions, and authorization packages
• Perform security control assessments aligned to NIST SP 800-53 and NIST 800-37
• Execute continuous monitoring activities, including vulnerability remediation, compliance validation, and reporting
• Conduct STIG implementation, patch management, and technical validation activities
• Analyze scan results, perform false positive validation, and ensure timely remediation of findings
• Utilize RMF and security compliance tools (XACTA, LATTEART, BISCOTTI, WATCHCAT, STE) to manage authorization data and workflows
• Review and maintain system security documentation to ensure completeness, accuracy, and audit readiness
• Support incident handling, auditing, configuration control, and change management processes
• Work with customers and cross‑functional teams to meet operational and security objectives

Qualifications

• Bachelor's degree in Computer Science, Information Assurance, or related field (4 additional years of experience may substitute)
• Minimum 7 years of experience as an ISSE or in a related role
• DoD 8570 IASAE Level II certification (or equivalent)
• Experience with the Risk Management Framework (RMF), including A&A processes, ATOs, and continuous monitoring
• Hands‑on experience with RMF tools, NIST 800-53/800-37, vulnerability scanning, STIG implementation, and security control validation

Requirements

• U.S. Citizenship is required for all applicants. CTP is an equal opportunity employer and abides by applicable employment laws and regulations. All applicants and employees are subject to random drug testing in accordance with Executive Order 12564. Employment is contingent upon successful completion of a security background investigation and polygraph.

Certification Requirements

• DOD 8570 IASAE Level II Certification

Security Clearance

This position requires an active Security Clearance with appropriate Polygraph.

Benefits

That’s why our pay is competitive, our missions are critical, and our benefits represent what matters most to CTP: Our People.

• Medical: CTP offers 3 superior plans, bringing our employees both in‑network and out‑of‑network options.
• Vision + Dental: Both free to you + paid in full by CTP.
• Retirement: 401k - 6% company contribution
• PTO + Leave: A work life balance is extremely important to our team here at CTP, which is why our paid time off plans are so lucrative. Offering customizable leave plans to meet your needs is just one of our many perks! Jury Duty, Bereavement + Military Leave provided.
• Career Growth: Up to $10,000 provided for approved career‑related learning, training, education, and/or tuition.
• Life and AD&D Insurance/Short-Term & Long-Term Disability: More peace of mind, at zero cost to you.
• Profit Sharing Bonus: End of year cash gets added to your bottom‑line.
• Referral Bonus Program: Our tiered program provides an incentive with each stage of the hiring process your referral passes. Our bonuses range from $7,000–$20,000, if your referral joins the team.

Equal Employment Opportunity

Columbia Technology Partners is an Equal Opportunity Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. Our EEO policy reflects our commitment to ensure equality and promote diversity and inclusion in the workplace. Our policy applies to all employees, job candidates, contractors, stakeholders, partners, and visitors.