Information Systems Security Engineer New

Bespoke Technologies, Inc.; Chantilly (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

Bespoke Technologies, Inc. in Chantilly, VA is seeking a Senior Information Systems Security Engineer to lead security engineering activities across the system lifecycle, emphasizing architecture, control implementation, and compliance. An active Sponsor is required for consideration.

The role demands extensive ISSE experience, A&A/ATO background, ETL/data modeling, and collaboration with engineers and mission customers to ensure secure, compliant solutions in high-security environments.

Qualifications

• Minimum of 8 years with BS/BA including at least 2 years of Sponsor experience; Minimum of 6 years with MS/MA including at least 2 years of Sponsor experience; Minimum of 3 years with PhD including at least 2 years of Sponsor experience; an additional four years of experience may be considered in lieu of degree
• Demonstrated experience designing, securing, and operating data flow solutions in high security/classified environments
• Strong ISSE background including A&A/ATO, security architecture, vulnerability analysis, accreditation documentation, and continuous monitoring requirements
• Hands-on experience with ETL pipelines, data modeling, activity modeling, and AI/ML supportive data engineering
• Experience with graphing database technologies (Neo4j and Cypher query language expertise preferred)
• Demonstrated experience cleaning, modeling, and visualizing medium to large datasets
• Ability to clearly communicate complex technical concepts to both technical and nontechnical audiences
• Customer-specific experience supporting mission systems or classified programs

Responsibilities

• Lead ISSE activities across the system lifecycle, including security architecture and control implementation.
• Develop and update A&A/ATO docs: SSPs, POA&Ms, test procedures, evidence, and continuous monitoring artifacts.
• Conduct routine security scans, vulnerability assessments, patching, and remediation for cloud and on-prem systems.
• Apply security-by-design in architectures, data flows, ETL pipelines, and mission workflows.
• Collaborate with engineers, developers, and customers to meet accreditation and risk requirements.
• Design, build, and optimize ETL pipelines and data flows for AI/ML projects and analytics.
• Perform analysis, risk assessment, cost/timeline studies supporting mission solutions.
• Maintain documentation for datasets, queries, security artifacts, and engineering decisions.

Job description

BT-496 – Information Systems Security Engineer
Skill Level: Senior
Location: Chantilly, VA (fully on-site, no remote option available)

**Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.**

Key Responsibilities:

Information Systems Security Engineering (ISSE)

• Lead and execute ISSE activities across the full system lifecycle, including security architecture development, security control selection/implementation, and ensuring compliance with NIST and customer specific security requirements.
• Develop, maintain, and update A&A/ATO documentation including SSPs, POA&Ms, test procedures, compliance evidence, and continuous monitoring artifacts.
• Conduct routine system security scans, vulnerability assessments, patch/update actions, and remediation workflows for cloud and on premises systems.
• Integrate security-by-design principles into system architectures, data flows, ETL pipelines, and mission workflows.
• Partner with system engineers, developers, and mission customers to align technical solutions with accreditation requirements, classification constraints, and operational risk considerations.
  
• Design, build, and optimize ETL pipelines, including data flows supporting AI/ML/LLM projects and large-scale analytics.
• Perform functional and technical analysis, internal control and risk analysis, cost estimation, timeline assessments, and trade studies supporting mission solutions.
• Apply system engineering disciplines and concepts of operations across cross organizational environments, ensuring secure and scalable system design.
• Clean, preprocess, analyze, and visualize medium to large datasets using modern analytic and statistical methods.
• Build and optimize Neo4j graph database solutions including schema design, relationship modeling, and efficient Cypher query development.
• Collaborate within Agile development frameworks and contribute to iterative planning cycles, sprint activities, and CI/CD processes.
• Maintain documentation for datasets, queries, security artifacts, engineering decisions, and developed software components.
  

Required Qualifications:

• Minimum of 8 years with BS/BA including at least 2 years of Sponsor experience; Minimum of 6 years with MS/MA including at least 2 years of Sponsor experience; Minimum of 3 years with PhD including at least 2 years of Sponsor experience; an additional four years of experience may be considered in lieu of degree
• Demonstrated experience designing, securing, and operating data flow solutions in high security/classified environments
• Strong ISSE background including A&A/ATO, security architecture, vulnerability analysis, accreditation documentation, and continuous monitoring requirements
• Hands-on experience with ETL pipelines, data modeling, activity modeling, and AI/ML supportive data engineering
• Experience with graphing database technologies (Neo4j and Cypher query language expertise preferred)
• Demonstrated experience cleaning, modeling, and visualizing medium to large datasets
• Ability to clearly communicate complex technical concepts to both technical and nontechnical audiences
• Customer-specific experience supporting mission systems or classified programs
  

Desired Qualifications

• Experience with enterprise data strategy, data governance, stewardship practices, and metadata management
• Experience developing dashboards or system visualizations
• Exposure to AI/ML or LLM system engineering and data workflows
• Familiarity with Agile development frameworks and cloud native design patterns