Information Systems Security Engineer (ISSE) - TS/SCI w/poly REQUIRED

BK Consulting; Columbia (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

Cobina is seeking an Information Systems Security Engineer to perform or review technical security assessments of computing environments, identify vulnerabilities, and recommend mitigation strategies. The role requires DoD IASAE Level 2, DoD program experience, and familiarity with RMF and SIEM tools.

Responsibilities include supporting ATOs, monitoring, vulnerability coordination with Tenable and other tools, and collaboration with ISSOs to remediate findings in a 24x7 environment.

Qualifications

• Seven (7) years' experience as an ISSE on DoD programs and contracts of similar scope, type, and complexity.

Responsibilities

• Serve as the technical security engineer for assigned systems and SSPs ensuring RMF compliance.
• Provide input for ATO packages, risk acceptance decisions, and continuous monitoring.
• Implement and validate controls from NIST SP 800-53 and liaise with technology frameworks.

Skills

Python

Education

Bachelor's degree in Computer Science

Job description

Senior Software Engineer

Cobina is looking for an Information Systems Security Engineer to support the team by performing or reviewing technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (AI) standards and regulations, and recommend mitigation strategies.

Qualifications

• Seven (7) years' experience as an ISSE on programs and contracts of similar scope, type, and complexity within the Federal Government is required. Bachelors degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university is required. Four (4) years of additional ISSE experience may be substituted for a bachelor's degree
• DoD 8570 compliance with IASAE Level 2 is required.
• Desired - Python

Key Responsibilities/Skills

• Serve as the technical security engineer for assigned systems and System Security Plans (SSPs), ensuring full lifecycle RMF compliance.
• Provide technical input for Authorization to Operate (ATO) packages, risk acceptance decisions, and continuous monitoring efforts.
• Implement and validate security controls from NIST SP 800-53 and serve as technical security liaison with technology frameworks to complete.
• Ensure all controls are properly mapped, implemented, and tested within the Security Control Traceability Matrix (SCTM) and respond to Security Assessment Report (SAR).
• Collaborate with the vulnerability scanning team (e.g., Tenable operators) to ensure scan compliance, findings are addressed, retested, and reflected accurately in the system's risk posture.
• Support continuous monitoring activities, including vulnerability tracking, control reassessments, and serve as technical security liaison with technology frameworks.
• Coordinate with ISSOs and system administrators to document and remediate vulnerabilities, control deficiencies, and Plan of Action & Milestones (POA&M) items.
• Lead or support reauthorization efforts, ensuring all system technical artifacts are updated, validated, and submitted on schedule.
• Evaluate and document security-relevant changes, assessing configuration updates, patches, or system modifications for RMF impact.
• Interface with Security Architect to ensure designs, configurations, and security mitigations align with approved architectures and customer mandates.
• Work with Technology Framework teams to complete all system documentation.
• Test and evaluate configurations in a lab environment.
• Knowledge of servers, virtualization, routers, switches, and firewalls as well as VLANS, routing and network segmentation.
• Demonstrated experience authoring and maintaining System Security Plans (SSPs), SCTMs, and POA&Ms.
• Solid understanding of continuous monitoring, reauthorization, and configuration management processes.
• Hands-on familiarity with Tenable, Splunk, STIG Viewer, and customer security compliance management tools.
• Knowledge of Windows, Linux, and network security controls implementation.
• Provide security operations support as needed.
• Excellent communication and teamwork skills. Willingness to train junior team members.
• Results oriented, high energy, self-motivated.
• Candidate may be required to respond to after-hours requests as required in a 24 x 7 environment.