ISSE: Cloud Security Engineer (RMF, Zero-Trust)

Bridge Core (BCore); Chantilly (VA); On-site; USD 180,000 - 200,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k)

Paid Time Off

Stipends

Referral Bonuses

Job summary

Bridge Core (BCore) seeks an Information Systems Security Engineer in Chantilly, VA. The role focuses on engineering, implementing, and assessing security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST, and A&A processes, across identity, network, compute, and storage domains.

You will collaborate with government stakeholders to translate requirements into secure designs and artifacts, maintain A&A documentation, and drive remediation actions through the full

Qualifications

• Demonstrated experience engineering, implementing, and assessing security controls for cloud-hosted information systems per RMF, ICD 503, NIST guidance and A&A processes.
• Experience securing cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged-access controls.
• Ability to translate security requirements and system architectures into implementable security designs and artifacts.
• Experience developing and maintaining A&A artifacts, including SSPs, control implementations, diagrams, SSPs, POA&Ms, and continuous monitoring plans.
• Ability to assess control implementation, identify gaps, and drive remediation with technical teams.

Responsibilities

• Integrate a commercial product into a customer network as part of the B/Core integration team and government customer.
• Collaborate with cloud, network, application, database, cybersecurity, Oracle, and government stakeholders to communicate risks and status clearly.
• Develop security designs, test plans, evidence matrices, remediation plans, and operating procedures; provide executive-ready status briefings.

Skills

RMF & A&A

NIST guidance

Zero Trust

Cloud security

Security architecture

Job description

Bridge Core (BCore) seeks an Information Systems Security Engineer in Chantilly, VA. The role focuses on engineering, implementing, and assessing security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST, and A&A processes, across identity, network, compute, and storage domains.

You will collaborate with government stakeholders to translate requirements into secure designs and artifacts, maintain A&A documentation, and drive remediation actions through the full