Information Systems Security Engineer- Chantilly, VA

MSCCN; Chantilly (VA); On-site; USD 87,000 - 182,000; Full time

Job summary

MSCCN is seeking an Information Systems Security Engineer (ISSE) to serve as the primary technical authority for security and resilience of mission-critical systems.

You will integrate RMF principles into every phase of the Software Development Life Cycle and coordinate with software developers, systems engineers, and government stakeholders to maintain the Authority to Operate for cloud and on-prem environments.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• Minimum 5 years in cybersecurity or information assurance.
• Active TS/SCI clearance.
• DoD 8570 IAT Level II compliance (e.g., Security+, CCNA Security, CySA+).
• Mastery of RMF lifecycle and NIST 800-37 for ATO.
• Knowledge of NIST 800-53/800-171 controls and overlays.
• Ability to author cybersecurity policies and manage POA&Ms.

Responsibilities

• Lead RMF process and ATO coordination end-to-end.
• Review changes for security and provide cloud oversight (AWS/Azure).
• Conduct vulnerability assessments and manage POA&Ms.
• Establish continuous monitoring and brief risks to stakeholders.

Skills

RMF process

NIST 800-53/171

Cloud security

Disaster recovery

POA&M management

Security governance

Stakeholder briefing

Education

Bachelor’s Degree in CS/IT/Cybersecurity

Tools

Xacta

SNOW/ServiceNow

Nessus

Splunk

Anchore

Job description

ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their open roles. The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers. If you have the required skill set, education requirements, and experience, please click the submit button and follow the next steps. Unless specifically stated otherwise, this role is "On-Site"

Information Systems Security Engineer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI with Polygraph

Employee Type: Regular

Percentage of Travel Required: None

Type of Travel: None

The proposed salary range for this position is: $86,600 - $181,800

The Opportunity:

The Information Systems Security Engineer (ISSE) serves as the primary technical authority for the security and resilience of our mission-critical systems. This role is responsible for integrating security engineering principles into every phase of the Software Development Life Cycle to design and maintain secure architectures. You will collaborate with software developers, systems engineers, and government stakeholders to navigate the Risk Management Framework (RMF) lifecycle and maintain the Authority to Operate (ATO) for complex cloud and on-premise environments.

Responsibilities

• RMF & ATO Management: Lead the end-to-end Risk Management Framework (RMF) process, managing NIST 800-53/171 control sets and coordinating with cybersecurity entities (SCA/DAO) to secure and maintain Authority to Operate (ATO).
• Security Engineering & Cloud Oversight: Drive "security by design" by reviewing technical change requests, evaluating new technologies, and providing security oversight for cloud-based platforms (AWS/Azure).
• Vulnerability & Risk Mitigation: Conduct system inspections and vulnerability assessments to manage POA&Ms, prioritize system patching, and ensure robust disaster recovery and contingency planning.
• Technical Compliance & Monitoring: Establish continuous monitoring protocols to track security posture, enforce cybersecurity policies, and brief complex technical risks to senior stakeholders.

Qualifications:

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related degree.
• Minimum of 5 years of progressive experience in Cybersecurity, Information Assurance, or related background.
• Active TS/SCI.
• DoD 8570 IAT Level II Compliance (e.g., Security+, CCNA Security, or CySA+).
• Full RMF Lifecycle Mastery: Deep experience navigating the Risk Management Framework (NIST 800-37) to secure and maintain Authority to Operate (ATO).
• Control Implementation: Expert knowledge of NIST 800-53 and 800-171 control sets, including managing control inheritance and applying overlays.
• Governance & Documentation: Ability to author cybersecurity policies, manage POA&Ms, and develop Contingency/Disaster Recovery plans.
• Technical Oversight: Experience reviewing system changes for security impact and collaborating with dev teams to integrate new technologies securely.
• Continuous Monitoring: Proficiency in conducting security inspections, audits, and vulnerability analysis to track patch effectiveness and system health.
• Cloud Security: Functional understanding of security operations within AWS or Azure environments.
• Stakeholder Engagement: Proven ability to brief complex technical risks to large groups and coordinate directly with SCAs and DAOs.
• Resilience: Ability to manage high-pressure tasks and mission-critical deadlines both independently and in team settings.

Desired

• Basic understanding of the software development lifecycle (SDLC).
• Experience working with governance risk and compliance tools (i.e. Xacta, SNOW, etc.).
• Experience utilizing common industry tools (i.e. Nessus, Splunk, Anchore, etc.).