Information Systems Security Engineer with Security Clearance

VTG; Huntsville (AL); On-site; USD 120,000 - 180,000; Full time

Job summary

VTG is seeking a Senior Information Systems Security Engineer to support a national security customer in Huntsville, AL. This is a 100% onsite role focusing on RMF lifecycle implementation for FBI IT systems, risk management, and continuous monitoring.

You will lead a team of security professionals, define preparation steps, categorize systems, tailor security controls, and ensure verification through assessments and audits. A TS clearance with SCI eligibility is required.

Qualifications

• 8+ years of experience in secure design, analysis and testing of information security systems.
• 8+ years applying methods and standards to ensure baseline security safeguards are documented.
• 8+ years creating and updating security test plans for risk mitigation.
• Active Top Secret Clearance with SCI eligibility.
• CISSP or CEH certification required.
• Cloud certifications: AWS Security Specialty, CCSP, AWS Solutions Architect.

Responsibilities

• Lead and mentor a team of security professionals on the RMF lifecycle for FBI IT systems.
• Oversee the Prepare step roles, responsibilities, and risk strategies.
• Guide system categorization based on impact and regulatory requirements.
• Advise on selecting, tailoring and documenting security controls.
• Oversee implementation of controls across lifecycles with quality focus.
• Plan and document security control assessments to validate safeguards.
• Prepare risk management documentation for authorization.
• Direct ongoing monitoring and continuous assessment activities.
• Serve as principal cybersecurity advisor on risk analysis, incident response, and audit support.
• Foster security awareness; provide technical guidance and training.
• Track and report status, risks and improvement opportunities to leadership.
• Maintain knowledge of RMF, NIST guidance and industry best practices.

Skills

RMF lifecycle

Cybersecurity leadership

Risk analysis

Incident response

Security training

Leadership & mentoring

Education

CISSP or CEH certification

Tools

AWS Certified Security - Specialty

CCSP

AWS Solutions Architect - Associate

Job description

Overview VTG is seeking a Senior Information Systems Security Engineer (ISSE) to support our national security customer in Huntsville, AL. The position is 100% onsite. What will you do?

• Lead, mentor, and supervise a team of contractor security professionals responsible for the end-to-end implementation of the RMF lifecycle for FBI IT systems.
• Oversee and coordinate activities within the Prepare step, ensuring roles, responsibilities, and risk management strategies are clearly defined and maintained.
• Guide system categorization efforts to ensure all information systems are appropriately classified based on mission/business impact and regulatory requirements.
• Advise on the selection, tailoring, and documentation of security controls aligned with system categorizations, Bureau risk appetite, and compliance requirements.
• Oversee the implementation of technical, operational, and management controls throughout system and application lifecycles, with a particular focus on quality and completeness of all deliverables.
• Ensure comprehensive security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards.
• Prepare risk management documentation for system authorization and executive decision-making.
• Direct ongoing monitoring and continuous assessment activities, collecting metrics to adjust security strategies and ensure sustained compliance.
• Serve as a principal technical advisor on cybersecurity, bringing subject‑matter expertise to risk analysis, incident response, system remediation, and audit support efforts.
• Foster a culture of security awareness, providing technical guidance and training to both team members and stakeholders.
• Track, report, and communicate status, risks, and improvement opportunities related to security engineering activities to leadership and stakeholders.
• Maintain up-to-date knowledge of RMF, NIST guidance, and industry best practices in support of continuous process improvement. Do you have what it takes?
• 8 years of experience in secure design, analysis, and test of information security systems and products.
• 8 years of experience applying methods, standards and approaches for ensuring the baseline security safeguards are appropriately implemented and documented.
• 8 years of experience creating and updating security test plans for detecting and mitigating risk to information systems.
• Active Top Secret Clearance w/ SCI eligibility
• Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) certification required
• Cloud certification:
• AWS Certified Security - Specialty * (ISC)² Certified Cloud Security Professional (CCSP)
• AWS Certified Solutions Architect - Associate
• Position contingent upon contract award*