Information Systems Security Engineer (ISSE)

Nightwing; Virginia Beach (VA); On-site; USD 85,000 - 115,000; Full time

Job summary

A leading company in cybersecurity is looking for an Information Systems Security Engineer (ISSE) to ensure compliance with government standards. The role involves collaborating with teams to integrate security throughout the SDLC, performing security assessments, and developing security policies. Candidates should have a relevant degree, certifications, and experience in security engineering.

Qualifications

• 4-7 years of experience in security engineering or related fields.
• Active SECRET clearance required.

Responsibilities

• Perform RMF activities to achieve Authority to Operate (ATO).
• Generate security documentation for system authorizations.
• Monitor security controls continuously.

Skills

Cybersecurity

Risk Management Framework (RMF)

Communication

Education

Bachelor’s degree in CS, IT, Cybersecurity

Master’s degree

Tools

ACAS

SCAP

HBSS

Splunk

SIEM

Job description

Information Systems Security Engineer (ISSE)

Nightwing provides advanced cyber, data operations, systems integration, and intelligence support services to meet demanding challenges. Our capabilities include cyber space operations, cyber defense, vulnerability research, technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. We serve clients in the intelligence community, defense, civil, and commercial markets.

Position Overview:

The Information Systems Security Engineer (ISSE) ensures that cybersecurity architecture, design, development, and deployment comply with government and industry standards. The ISSE collaborates with system architects, developers, and security teams to integrate security throughout the system development life cycle (SDLC).

The ISSE performs or reviews technical security assessments to identify vulnerabilities, non-compliance issues, and recommends mitigation strategies. Supports security authorization activities, including DOD RMF and NIST RMF processes.

Key Responsibilities:

1. Perform RMF activities, providing guidance and oversight to achieve Authority to Operate (ATO).
2. Generate security documentation such as POA&M for obtaining and maintaining system authorizations.
3. Develop and maintain security artifacts like SSP, POAM, Contingency and Incident Response Plans, Configuration Management Plans.
4. Ensure system documentation reflects current security configurations.
5. Monitor security controls continuously for proper implementation and operation.
6. Collaborate with system owners and teams to produce A&A documents and operational procedures.
7. Support security solutions and architectures aligned with DOD policies and RMF.
8. Analyze problems, communicate solutions effectively, and participate in system design reviews.
9. Evaluate security tools and recommend enhancements.
10. Develop and enforce security policies, standards, and procedures.
11. Conduct security engineering activities including design, testing, and integration.
12. Advise system owners on security matters and categorize systems.
13. Design secure networking and enclave environments, supporting DevSecOps and change management.
14. Provide security recommendations for cloud systems, perform risk assessments, and interpret cybersecurity guidance.

Qualifications:

• Bachelor’s degree in CS, IT, Cybersecurity, or related; Master’s preferred.
• DoD 8570.01-M IAT certification.
• 4-7 years of experience in security engineering or related fields.
• Experience with NIST RMF, FISMA, DOD STIGs, and security tools (ACAS, SCAP, HBSS, Splunk, SIEM).
• Strong knowledge of DOD cybersecurity policies (DODI 8500.01, 8510.01, RMF).
• Familiarity with ISO 27001, NIST SP 800-53, CMMC, STIGs, CIS Benchmarks.

Clearance:

• Active SECRET clearance required.

Preferred:

• Master’s degree or advanced training.
• Experience supporting classified environments.

Nightwing is committed to diversity and inclusion. Join us to shape the future of cybersecurity and intelligence as part of our team.