ISSE Cybersecurity Engineer – DoD RMF & DevSecOps

CAE; Tampa (FL); On-site; USD 105,000 - 145,000; Full time

Job summary

CAE USA Inc. is seeking an Information Systems Security Engineer (ISSE) to provide ISSE/DevSecOps support for the C‑17 program.

The role ensures traceability of security controls to system security requirements and integrates cybersecurity requirements across multiple enclaves through disciplined security engineering practices. The ideal candidate has DoD cybersecurity systems engineering knowledge, RMF experience, and the ability to coordinate with acquisition processes and multiple

Qualifications

• Education: AAS, BA, or BS in Engineering, Computer Science, Information Systems, or a related technical discipline.
• Certifications: Completion and maintenance of certifications and training in accordance with AFI 17‑303 and DAFMAN 17‑1305. Qualification per DoDD 8140.01, DoDD 8140.02, and DoD 8140.03 required.
• Acceptable baseline certifications: CISSP, CISM, CASP, CEH, CHFI, or DoD IAM‑II/III equivalents.
• Clearance: Active Secret Clearance is required.
• Experience: 2 to 7 years performing ISSE duties within DoD or equivalent regulated environments.
• Training: DISA ESS Administrator 201/301 and ePO 5.10 are preferred.
• Preferred Qualifications: Experience with eMASS, Trellix ePO, ACAS, SCAP/STIG tools, Evaluate‑STIG or similar tools.

Responsibilities

• Provide ISSE support in accordance with contract requirements, ensuring cybersecurity principles and controls are integrated into architecture, development, configuration, and operational processes.
• Trace cybersecurity controls to system security requirements documented in the acquisition process, ensuring proper alignment and verification.
• Capture, refine, and document information security requirements and integrate those requirements across the entire ATS through secure architecture, development, and configuration.
• Apply systems engineering processes and cybersecurity design principles referencing RMF, DoDI 5000.02, DoDI 5000.83, DoD TPP Guidebook, and NIST SP 800‑160.
• Support the C‑17 Lead ISSO and C‑17 TS Cybersecurity Program by planning, documenting, and implementing required cybersecurity controls and security engineering activities.
• Collaborate with ISSOs to perform vulnerability analyses, update and maintain RMF artifacts, and support ongoing compliance activities across C‑17 systems.
• Assist in audit log reviews, ACAS scans, STIG assessments, and implementation of endpoint protection, host-based security, and data‑loss prevention measures.
• Collaborate with network administrators to create and maintain PPSM entries for assigned systems in accordance with DISA requirements.
• Maintain authorized hardware and software baselines, working closely with configuration management teams across multiple enclaves.
• Assist with vulnerability scanning utilizing DoD‑approved tools such as Nessus Security Center and take part in supply‑chain evaluations of products and services integrated into the operational environment.

Skills

RMF

Security engineering

Acquisition security

Vulnerability assessment

Education

AAS/BA/BS in Engineering/CS/IS

Tools

eMASS

Trellix ePO

ACAS

SCAP/STIG tools

Evaluate-STIG

Job description

CAE USA Inc. is seeking an Information Systems Security Engineer (ISSE) to provide ISSE/DevSecOps support for the C‑17 program.

The role ensures traceability of security controls to system security requirements and integrates cybersecurity requirements across multiple enclaves through disciplined security engineering practices. The ideal candidate has DoD cybersecurity systems engineering knowledge, RMF experience, and the ability to coordinate with acquisition processes and multiple