Information Systems Security Engineer (ISSE)

Axiom Consultants; Norfolk (VA); On-site; USD 140,000 - 180,000; Full time

Job summary

Axiom Consultants in Virginia is seeking an experienced Information Systems Security Engineer (ISSE) to support mission-critical programs in a 100% on-site SCIF environment in Norfolk, VA. You will apply RMF, conduct risk assessments, and help design secure systems with Zero Trust principles.

The ideal candidate has 6+ years in cybersecurity engineering or risk management, an active TS/SCI clearance, a technical bachelor's degree, and certifications such as CISSP or CASP+.

Qualifications

• 6+ years of cybersecurity experience in engineering, compliance, or risk management.
• Active TS/SCI clearance required.
• Bachelor's degree (or higher) in a technical discipline (e.g., Cybersecurity, Computer Science, Information Systems, Engineering).
• CISSP or CASP+ certification preferred.

Responsibilities

• Apply RMF per NIST guidance to assess, authorize, and monitor systems.
• Conduct risk assessments, vulnerability analysis, and security evaluations.
• Support design, implementation, and maintenance of Zero Trust architectures.
• Develop and maintain SSPs, POA&M, and security controls documentation.
• Collaborate with engineers and stakeholders to ensure secure system design and integration.
• Evaluate controls for effectiveness and compliance with requirements.
• Support continuous monitoring and incident response activities.
• Provide guidance on cybersecurity best practices and threats.

Skills

RMF lifecycle

Zero Trust

NIST SP 800-53

A&A processes

Education

Bachelor's degree in a technical discipline

Job description

Must have a TOP SECRET/SCI level security clearance. This position is 100% on-site. The entirety of the workspace is a Special Compartmented Information Facility (SCIF).

We are seeking an experienced Information Systems Security Engineer (ISSE) to support mission-critical programs. The ideal candidate will possess deep expertise in cybersecurity engineering, Risk Management Framework (RMF), and secure system design within high-security environments. This role requires a proactive professional capable of ensuring compliance with federal security standards while supporting advanced cyber initiatives, including Zero Trust architectures.

Key Responsibilities

• Apply the Risk Management Framework (RMF) in accordance with NIST SP 800-37 and NIST SP 800-53 to assess, authorize, and monitor systems
• Conduct comprehensive risk assessments, vulnerability analysis, and security evaluations
• Support the design, implementation, and maintenance of Zero Trust architectures
• Develop and maintain system security documentation, including SSPs, POA&Ms, and security controls
• Collaborate with system engineers, architects, and stakeholders to ensure secure system design and integration
• Evaluate security controls for effectiveness and compliance with federal and agency requirements
• Support continuous monitoring efforts and incident response activities
• Provide technical guidance on cybersecurity best practices and evolving threats

Required Qualifications

• 6+ years of cybersecurity experience in engineering, compliance, or risk management
• Bachelor's degree (or higher) in a technical discipline (e.g., Cybersecurity, Computer Science, Information Systems, Engineering)
• Active TS/SCI clearance
• One of the following certifications:
• CISSP (Certified Information Systems Security Professional)
• CASP+ (or SecurityX equivalent)

Desired Skills & Experience

• Strong expertise in:
• RMF implementation and lifecycle management
• NIST SP 800-53 security controls
• NIST SP 800-37 Risk Management Framework
• Security assessment and authorization (A&A) processes

Experience working in classified or highly secure government environmentsKnowledge of Zero Trust security principles and architecture

Preferred / Bonus Qualifications

• Experience supporting or familiarity with:
• NLCC (National Leadership Command Capability)
• NC3 (Nuclear Command, Control, and Communications)
• Nuclear Command and Control systems
• NSA cryptography methodologies and standards