Information Systems Security Engineer (Subject Matter Expert)

Nightwing; Sterling (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Nightwing seeks an Information Systems Security Engineer (ISSE) to bridge policy and technical implementation for government systems. The ISSE collaborates with ISSM and sponsor IT managers through Agile development, providing guidance and oversight for accreditation and continuous monitoring.

The role emphasizes input to A&A activities, system security design, and maintenance training materials, with a STEM degree and 10 years of technical experience preferred.

Qualifications

• Bachelor’s degree (preferably STEM) and 10 years of technical experience; additional experience may substitute for education.
• Experience implementing security controls in governance, risk, and compliance contexts (ICD 503).
• Experience with evaluating security architectures against security requirements.

Responsibilities

• Bridge gap between high level security policies and technical implementations.
• Provide guidance, standards, and oversight to development teams on accreditation processes.
• Contribute to A&A activities and documentation such as system security design and operations procedures.
• Support continuous monitoring and risk assessment throughout the system lifecycle.

Skills

Information security

Risk assessment

Analytical skills

Advanced communications skills

Presentation skills

Agile framework familiarity

Nessus

Education

Bachelor’s degree (STEM)

Tools

NESSUS

Job description

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

Information Systems Security Engineer - SME

Seeking an Information Systems Security Engineer (ISSE). The role of the ISSE is to bridge the gap between high level security policies/requirements and technical/operational implementation of those requirements. Candidates should have in depth understanding of the cybersecurity policies and procedures for government sector information systems and sufficient technical knowledge and experience to implement them. The ISSE will work closely and effectively with the ISSM and Sponsor IT managers on all aspects of their development and implementation programs as they progress through their Agile management processes. The ISSE will provide guidance, standards, and oversight to the development teams as they work towards accreditation and then to keep accredited. The candidate will provide input to A&A process activities and related documentation such as systems concept of operations, system security design, implementation plans, operational procedures, and maintenance training materials.

Bachelor’s degree (preferably in STEM field) and 10 years technical experience. Additional technical experience may be substituted in lieu of education.

TS/SCI With Polygraph Required Day 1

• Experience working with sponsor and providing input to A&A process activities and related documentation such as systems concept of operations, system security design, implementation plans, operational procedures, and maintenance training materials
• Demonstrated on-the-job experience conducting assessments of existing IT architecture for compliance with security requirements from applicable security frameworks (such as ICD 503)
• Demonstrated on- the job- experience evaluating proposed security architectures and designs against security compliance requirements.
• Basic understanding of information security principles and risk assessment techniques
• Provide continuous monitoring support for information systems
• Basic understanding of information security principles and risk assessment techniques
• Experience with using NESSUS and other scanning applications
• Advanced analytical skills: able to use prior experience and knowledge to seamlessly incorporate new knowledge or information during client interactions
• Advanced communications skills: able to work well with others, independently and as part of a team
• Must be able to work well with others including educating development teams who may not have the same understanding of security as you do
• Intermediate presentation skills: able to interview engineers on technical subject matter as well as brief executive level stakeholders
• Familiarity with Agile framework

Certifications (not Required But Encouraged)

• Certified Information Systems Security Professional (CISSP)
• Information Systems Security Engineering Professional (ISSEP)
• AWS (Architect, DevOps, Security)

At Nightwing, we value collaboration and teamwork. You’ll have the opportunity to work alongside talented individuals who are passionate about what they do. Together, we’ll leverage our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients.

Thank you for considering joining us as we embark on this new journey and shape the future of cybersecurity and intelligence together as part of the Nightwing team.

Nightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.