Information Systems Security Engineer 2

axiomconsultants; Linthicum (MD); On-site; USD 140,000 - 210,000; Full time

Job summary

AXIOM CONSULTANTS is seeking an experienced ISSE Level 2 to support mission-critical national security programs. The role requires deep expertise in cybersecurity engineering, RMF, and secure system design within high-security environments, with a focus on Zero Trust architectures.

Candidates must hold TS/SCI clearance with Polygraph (NSA requirement), be fully MPO-cleared, and possess a CISSP or CASP+ certification.

Qualifications

• 14+ years of cybersecurity experience in engineering, compliance, or risk management.
• Bachelor's degree in a technical discipline (e.g., Cybersecurity, Computer Science, Information Systems, Engineering).
• Active TS/SCI clearance with Polygraph (NSA requirement).
• Fully cleared with MPO.
• CISSP or CASP+ certification (or SecurityX equivalent).

Responsibilities

• Apply the RMF in accordance with NIST SP 800-37 and SP 800-53 to assess, authorize, and monitor systems.
• Conduct comprehensive risk assessments, vulnerability analysis, and security evaluations.
• Support the design, implementation, and maintenance of Zero Trust architectures.
• Develop and maintain system security documentation, including SSPs and POA&Ms, and security controls.
• Collaborate with system engineers, architects, and stakeholders to ensure secure design and integration.
• Evaluate security controls for effectiveness and compliance with federal and agency requirements.
• Support continuous monitoring efforts and incident response activities.
• Provide technical guidance on cybersecurity best practices and evolving threats.

Skills

RMF implementation

NIST SP 800-53

NIST SP 800-37

A&A processes

Zero Trust

Classified environments

Education

Bachelor's degree (technical)

Job description

Position Overview

We are seeking a highly experienced Information Systems Security Engineer (ISSE) Level 2 to support mission-critical national security programs. The ideal candidate will possess deep expertise in cybersecurity engineering, Risk Management Framework (RMF), and secure system design within high-security environments. This role requires a proactive professional capable of ensuring compliance with federal security standards while supporting advanced cyber initiatives, including Zero Trust architectures.

Key Responsibilities

• Apply the Risk Management Framework (RMF) in accordance with NIST SP 800-37 and NIST SP 800-53 to assess, authorize, and monitor systems
• Conduct comprehensive risk assessments, vulnerability analysis, and security evaluations
• Support the design, implementation, and maintenance of Zero Trust architectures
• Develop and maintain system security documentation, including SSPs, POA&Ms, and security controls
• Collaborate with system engineers, architects, and stakeholders to ensure secure system design and integration
• Evaluate security controls for effectiveness and compliance with federal and agency requirements
• Support continuous monitoring efforts and incident response activities
• Provide technical guidance on cybersecurity best practices and evolving threats

Required Qualifications

• 14+ years of cybersecurity experience in engineering, compliance, or risk management
• Bachelor's degree (or higher) in a technical discipline (e.g., Cybersecurity, Computer Science, Information Systems, Engineering)
• Active TS/SCI clearance with Polygraph (NSA requirement)
• Fully cleared with MPO
• One of the following certifications:
  • CISSP (Certified Information Systems Security Professional)
  • CASP+ (or SecurityX equivalent)

Desired Skills & Experience

• Strong expertise in:
  • RMF implementation and lifecycle management
  • NIST SP 800-53 security controls
  • NIST SP 800-37 Risk Management Framework
  • Security assessment and authorization (A&A) processes
• Experience working in classified or highly secure government environments
• Knowledge of Zero Trust security principles and architecture

Preferred / Bonus Qualifications

• Experience supporting or familiarity with:
  • NLCC (National Leadership Command Capability)
  • NC3 (Nuclear Command, Control, and Communications)
  • Nuclear Command and Control systems
  • NSA cryptography methodologies and standards