Information Systems Security Engineer (ISSE)

VTG; Chantilly (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Job summary

VTG is seeking a skilled Information Systems Security Engineer (ISSE) to design, implement, and maintain security controls across enterprise systems and networks in Chantilly, VA. This role ensures systems meet security requirements while supporting mission-critical operations.

You will work with system owners, engineers, and cybersecurity teams to integrate security throughout the system lifecycle, support RMF processes, and stay ahead of threats with strong technical leadership.

Qualifications

• Bachelor’s degree in cybersecurity, IT, CS, or equivalent experience.
• Active TS/SCI with polygraph.
• 5+ years of information security experience focusing on system security engineering.

Responsibilities

• Design, implement, and maintain security controls for information systems and networks.
• Support RMF lifecycle: categorization, control selection, implementation, assessment and authorization.
• Conduct security assessments, vulnerability scans, and risk analysis.
• Develop and maintain SSP, POA&M, SAR, and ATO packages.
• Ensure compliance with NIST, RMF, and organizational security policies.
• Collaborate with ISSOs, system admins, and developers to remediate vulnerabilities.
• Support continuous monitoring and incident response activities.
• Manage security tools (SIEM, IDS/IPS, endpoint protection).
• Provide guidance on secure architecture and design.

Skills

RMF

NIST 800-53

ISSE

Vulnerability assessments

SIEM

Access control

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

ACAS/Nessus

Job description

Overview

VTG is seeking a highly skilled Information Systems Security Engineer (ISSE) to design, implement, and maintain security controls across enterprise systems and networks. This role ensures systems are compliant with security requirements while supporting mission-critical operations. The ISSE will work closely with system owners, engineers, and cybersecurity teams to integrate security throughout the system lifecycle.

What will you do?

• Design, implement, and maintain security controls for information systems and networks
• Support the Risk Management Framework (RMF) lifecycle, including system categorization, control selection, implementation, assessment, and authorization
• Conduct security assessments, vulnerability scans, and risk analysis
• Develop and maintain system security documentation (SSP, POA&M, SAR, etc.)
• Ensure systems comply with NIST, RMF, and organizational security policies
• Collaborate with ISSOs, system administrators, and developers to remediate vulnerabilities
• Support continuous monitoring and incident response activities
• Implement and manage security tools (SIEM, IDS/IPS, endpoint protection, etc.)
• Provide technical guidance on secure system architecture and design
• Stay current on emerging threats, vulnerabilities, and security technologies

Do you have what it takes?

• Active TS/SCI with Polygraph required.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
• 5+ years of experience in information security, with focus on system security engineering
• Hands-on experience with RMF and NIST 800-53 controls
• Experience developing and maintaining A&A documentation (SSP, POA&M, ATO packages)
• Knowledge of operating systems (Windows, Linux) and network security principles
• Experience with vulnerability scanning tools (ACAS, Nessus, or similar)
• Familiarity with security tools such as SIEM, firewalls, and endpoint protection
• Understanding of encryption, identity management, and access control mechanisms