InfoSec Engineer — RMF/DoD Security Architect

TLA-LLC; McLean (VA); On-site; USD 110,000 - 165,000; Full time

Benefits offered by this job

401(k) matching

Health, dental, vision insurance

Paid time off

Job summary

TLA is seeking an Information System Security Engineer (ISSE) in the McLean, VA area to design, implement, and sustain secure information systems and networks throughout their lifecycle. This role collaborates with system owners, developers, and stakeholders to identify risks and apply robust security controls in line with RMF and DoD guidelines.

The ISSE will design security measures, perform risk assessments, document SSPs/POA&Ms, and conduct verification testing with Nessus/ACAS.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Assurance, Information Systems Security Engineering, or related field (or equivalent).
• Minimum 5–8 years of information security engineering, system administration, or cybersecurity experience with hands-on security controls.

Responsibilities

• Design, develop, implement, and maintain secure information systems and networks.
• Assess risks and perform vulnerability analyses to identify security gaps.
• Prepare and maintain System Security Plans (SSPs) and security assessment reports.
• Plan and conduct security verification testing using tools like Nessus/ACAS.
• Support incident response and monitor systems for irregular activity.
• Provide guidance on secure design, development, and coding practices.
• Oversee system hardening using security configuration settings (DISA STIGs).

Skills

Security engineering principles

Secure architecture & design

Vulnerability assessment

SIEM usage

DISA STIGs/SCAP

Network security

Windows/Linux/Unix security

RMF/DoD guidance

Strong communication

Education

Bachelor's degree in CS/IT/Information Assurance

Tools

Nessus/ACAS

Splunk

LogRhythm

DISA STIGs

Job description

TLA is seeking an Information System Security Engineer (ISSE) in the McLean, VA area to design, implement, and sustain secure information systems and networks throughout their lifecycle. This role collaborates with system owners, developers, and stakeholders to identify risks and apply robust security controls in line with RMF and DoD guidelines.

The ISSE will design security measures, perform risk assessments, document SSPs/POA&Ms, and conduct verification testing with Nessus/ACAS.