Information Systems Security Engineer - TS/SCI

Parsons; Centreville (VA); On-site; USD 88,000 - 155,000; Full time

Job summary

Parsons is seeking an Information Systems Security Engineer (ISSE) / Cyber Systems Engineer to support a DoD system. You will lead vulnerability management, patching, and RMF activities, working with the ISSO to maintain security posture.

The role requires TS/SCI clearance, 4+ years of DoD cybersecurity experience, and hands-on use of ACAS/Nessus, STIGs, and Jira. Strong scripting and collaboration skills are essential.

Qualifications

• Active TS/SCI clearance required.
• Bachelor’s degree in cybersecurity, CS, IT, engineering, or related field.
• 4+ years in cybersecurity engineering in DoD or federal environment.
• IAT Level II or Level III baseline certification (e.g., Security+ CE, CASP+, CISSP).
• Hands-on with ACAS/Nessus for vulnerability and compliance scanning.
• Strong RMF and NIST SP 800-53 knowledge.

Responsibilities

• Conduct monthly SSP ACAS vulnerability scans and quarterly STIG/SCAP scans.
• Perform monthly SSP patch upgrades to keep systems compliant.
• Execute annual manual STIG checks for non-scanable components.
• Remediate POA&M findings via Jira and coordinate with ISSO.
• Assist ISSO with security incidents and logs analysis.
• Maintain security docs, diagrams, HW/SW lists, and PPSM records.
• Support RMF documentation updates per NIST SP 800-53.

Skills

Active TS/SCI

Communication skills

Scripting: PowerShell/Python/Bash

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering or related field

Tools

ACAS

Tenable Nessus

Jira

OpenSearch/Elasticsearch

DISA STIGs

Job description

In a world of possibilities, pursue one with endless opportunities. Imagine Next!

At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.

Job Description:

We are seeking a highly skilled Information Systems Security Engineer (ISSE) / Cyber Systems Engineer to support our Department of Defense (DoD) system.

In this role, you will be the primary technical engineer responsible for mitigating vulnerabilities, ensuring system compliance, and maintaining the security posture of our systems. You will work directly with the ISSO to remediate findings identified in ACAS Vulnerability and SCAP scans, manage Jira tickets tied to the Plan of Action and Milestones (POA&M), and ensure continuous compliance with the NIST Risk Management Framework (RMF) and NIST SP 800-53 controls. This is a hands-on technical role requiring a strong background in vulnerability management, system patching, and scripting.

What You'll Be Doing:

• Vulnerability Management: Conduct monthly System Security Plan (SSP) ACAS Vulnerability Scans and quarterly ACAS Security Technical Implementation Guide (STIG) / SCAP Scans.


• System Maintenance & Patching: Perform monthly SSP patch version upgrades to ensure systems remain secure and compliant.


• Compliance & Auditing: Conduct annual manual STIG checks on system components that cannot be scanned automatically.


• POA&M Remediation: Act as the primary technical remediator for POA&M findings, executing remediation tasks tracked via Jira tickets generated by the ISSO.


• Incident & Alert Response: Assist the ISSO with investigating and responding to security alerts and logs.


• Documentation & Configuration Management: Maintain and update critical security documentation, including network/system diagrams, Hardware/Software (HW/SW) lists, and Ports, Protocols, and Services Management (PPSM) documentation.


• RMF Support: Assist the ISSO in drafting, updating, and maintaining NIST RMF documentation in accordance with NIST SP 800-53 guidelines.

What Required Skills You'll Bring:

• Active TS/SCI


• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical field (or equivalent years of relevant work experience).


• Minimum of 4+ years of hands-on experience in cybersecurity engineering, systems administration, or a related technical role within a DoD or federal environment.


• Must hold an active baseline certification for Information Assurance Technical (IAT) Level II or Level III (e.g., CompTIA Security+ CE, CASP+ CE, CISSP, or equivalent).


• Proven hands-on experience using Assured Compliance Assessment Solution (ACAS) / Tenable Nessus for vulnerability and compliance scanning.


• Strong technical background in applying and validating DISA STIGs across various operating systems (e.g., Windows, Linux) and network devices.


• In-depth knowledge of the NIST Risk Management Framework (RMF) and NIST SP 800-53 security controls.


• Experience with patch management and system upgrades in a secure, air-gapped, or highly regulated environment.


• Familiarity with tracking workflows and remediating technical tasks using Jira or similar ticketing systems.


• Ability to translate technical vulnerabilities into actionable remediation steps.


• Excellent communication skills and the ability to work collaboratively with the ISSO and other stakeholders.


• Advanced scripting skills (e.g., PowerShell, Python, Bash) to automate STIG application and compliance checks.

What Desired Skills You'll Bring:

• Advanced degree is preferred.


• Experience configuring and analyzing logs within OpenSearch, Elasticsearch, or similar SIEM/log analysis tools.


• Familiarity with DoD PPSM (Ports, Protocols, and Services Management) processes and registry requirements.


• Operating System/Computing Environment (CE) certifications (e.g., Microsoft Certified: Azure Administrator, Red Hat Certified System Administrator).


• Experience with developing network and rack diagrams in Visio.

Security Clearance Requirement:

An active Top Secret SCI security clearance is required for this position.

This position is part of our Federal Solutions team.

The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.

Salary Range: $88,400.00 - $154,700.00

We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!

This position will be posted for a minimum of 3 days and will continue to be posted for an average of 30 days until a qualified applicant is selected or the position has been cancelled.

Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.

We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest.

About Us

Parsons is a digitally enabled solutions provider focused on the defense, security, and infrastructure markets. With nearly 75 years of experience, Parsons is uniquely qualified to deliver cyber/converged security, technology-based intellectual property, and other innovative services to federal, regional, and local government agencies, as well as to private industrial customers worldwide.

Parsons is an equal opportunity, drug-free employer committed to diversity in the workplace. Minority/Female/Disabled/Protected Veteran/LGBTQ+.

For more about Parsons, visit parsons.com and follow us on Facebook, Twitter, LinkedIn, and YouTube.