Information Systems Security Engineer (ISSE)

Cybersecurity Jobs; Charleston (SC); On-site; USD 103,000 - 121,000; Full time

Job summary

Entarian is seeking an Information Systems Security Engineer (ISSE) to support NIWC Atlantic E2S2 in Charleston, SC. The role embeds cybersecurity into architectures and lifecycle engineering, aligned to RMF requirements and DoD guidance.

The engineer will develop and validate security controls, create SSPs and RMF artifacts, and support A&A activities across reviews, monitoring, and change management in a DoD context.

Qualifications

• Active Top Secret clearance is required.
• ABET-accredited bachelor’s degree in a related field.
• At least 3 years developing and maintaining cybersecurity policies and A&A activities.
• DoD 8570/8140 Level I certification in IAM/IAT/IASAE required.

Responsibilities

• Integrate cybersecurity requirements into system architecture and engineering designs across lifecycle.
• Engineer and validate security controls per NIST RMF, SP 800-53, CNSSI 1253, and DoD guidance.
• Perform risk analyses, vulnerability assessments, and threat analysis; advise mitigations.
• Produce RMF artifacts: SSPs, control statements, diagrams, interface docs, and analyses.
• Support RMF activities: SAPs, SARs, POA&Ms, and continuous monitoring artifacts.

Skills

Active Top Secret clearance

Minimum 3 years experience

DoD 8570/8140 Level I certification

Education

Bachelor’s degree (ABET-accredited)

Tools

ACAS

Nessus

SCAP

DoD Enterprise DevSecOps Reference Design

Platform One

PowerShell

Python

Ansible

Terraform

Kubernetes

IaC

DevSecOps

Zero Trust

Job description

Entarian is hiring an Information Systems Security Engineer (ISSE) to support the NIWC Atlantic Expeditionary Enterprise Systems and Services (E2S2) Division. The mission centers on embedding cybersecurity into system architectures and engineering efforts across the lifecycle, aligned to government policies, cybersecurity standards, and RMF requirements. This onsite role is based in Charleston, SC 29404.

Role focus

You will help ensure security requirements are built into architecture and technical design decisions from the start, then sustained through authorization and continuous monitoring activities. The position emphasizes engineering security controls using established frameworks and producing the technical documentation and artifacts needed for compliance.

Responsibilities

• Integrate cybersecurity requirements into system architecture, engineering designs, interface specifications, and technical documentation throughout the lifecycle.
• Engineer, implement, and validate security controls in line with NIST RMF, NIST SP 800-53, CNSSI 1253, and DoD cybersecurity guidance.
• Perform architecture reviews, vulnerability assessments, threat analysis, risk assessments, attack surface analysis, and mitigation planning.
• Support architecture reviews, design reviews, technical interchange meetings, and configuration control boards to ensure cybersecurity is addressed during design and change management.
• Develop and maintain technical cybersecurity documentation, including SSPs, control implementation statements, security and network diagrams, interface documents, and engineering analyses.
• Support RMF activities such as SAPs, SARs, POA&Ms, continuous monitoring documentation, and other authorization artifacts.
• Identify cybersecurity gaps and architectural risks, then recommend practical engineering solutions to improve the security posture.
• Collaborate with engineering teams to establish and maintain secure configuration baselines.
• Evaluate system changes, technology insertions, and architecture modifications for cybersecurity impacts and accreditation implications.
• Support vulnerability management by analyzing scan results, prioritizing findings, planning remediation, and validating corrective actions.
• Participate in integration, testing, verification, validation, and accreditation activities to confirm controls perform as intended.
• Support continuous monitoring by assessing control effectiveness and recommending improvements.
• Ensure secure integration of COTS, GOTS, open-source, cloud-based, and custom-developed technologies.
• Provide guidance on secure design, defense-in-depth, Zero Trust principles, and cybersecurity best practices.
• Prepare technical reports, engineering recommendations, risk assessments, and executive briefings.

Requirements

• Active Top Secret clearance.
• Bachelor’s degree (ABET-accredited) in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics, with the degree program meeting ABET accreditation requirements.
• Minimum 3 years of experience developing, implementing, and maintaining cybersecurity policies, including Assessment and Authorization (A&A) activities.
• Must hold a DoD 8570/8140 Level I certification in IAM, IAT, or IASAE.

Technologies and frameworks

• NIST RMF, NIST SP 800-53, CNSSI 1253, RMF
• ACAS, Nessus, SCAP, DoD Enterprise DevSecOps Reference Design, Platform One
• PowerShell, Python, Ansible, Terraform, Kubernetes, IaC, DevSecOps
• Zero Trust

Desired qualifications

• Experience supporting DoD, Intelligence Community, or classified government systems.
• Demonstrated experience engineering NIST RMF controls and producing RMF artifacts.
• Strong understanding of secure systems engineering, defense-in-depth, Zero Trust architectures, and large-scale distributed systems.
• Experience with operating systems, networking, virtualization, cloud, IAM, encryption, and cybersecurity technologies.
• Experience conducting vulnerability assessments using ACAS, Nessus, SCAP, or similar tools.
• Experience supporting cloud security, hybrid environments, containers, Kubernetes, or DevSecOps pipelines.
• Familiarity with IaC/scripting (PowerShell, Python, Ansible, Terraform) and the DoD Enterprise DevSecOps Reference Design or Platform One.
• Active security certifications (examples include Security+, CISSP, CASP+, CCSP, GIAC, or IASAE).
• Strong technical writing and verbal skills to communicate complex cybersecurity concepts to technical and leadership audiences.

Salary

The salary range is $103,000 - $121,000 per year (USD).