Senior Cloud Information Security Engineer

Systems Planning & Analysis; Lorton (VA); On-site; USD 180,000 - 210,000; Full time

Job summary

Systems Planning and Analysis, Inc. (SPA) is seeking an IT Modernization Information Systems Security Engineer (SCISSE) to join the Sea, Land, Air Analysis Group.

The role focuses on integrating cybersecurity requirements into system architecture from concept through deployment and across the full system lifecycle. You will develop security artifacts, perform threat modeling and vulnerability assessments, implement controls per NIST and CNSSI guidance, and collaborate with ISSOs, developers, and

Qualifications

• Onsite in Lorton, VA, up to full-time, based on client needs.
• Master’s degree in engineering, computer science, cybersecurity, networking, or programming.
• Experience with SAPs and cloud architecture with strong security elements.
• 12+ years in cybersecurity, IT, or systems engineering; TS/SCI with CI Polygraph.
• ISSEP/CCSP/CISSP/CASP/GCLD certifications are desirable.

Responsibilities

• Integrate cybersecurity requirements into system architecture from concept to deployment.
• Develop security artifacts—Security Plans, SATCMs, diagrams, and docs.
• Perform threat modeling, vulnerability assessments, and security impact analyses.
• Select, tailor, and implement controls per NIST SP 800-53, CNSSI 1253, and related guides.
• Communicate risk-based recommendations and support changes with ISSOs and teams.
• Monitor security compliance and maintain SOPs, POA&Ms, and governance artifacts.

Skills

Threat modeling

Security architecture

System hardening

Java

Python

Ruby

C++

Linux

Cloud security

Risk assessment

Education

Master’s degree in engineering, computer science, cybersecurity, networking, or programming

Tools

OPSWAT

OWASP ZAP

BurpSuite

Fortify

Tenable

Azure Defender

AWS Inspector

Nessus

SIEM

Job description

Systems Planning and Analysis, Inc. (SPA) is seeking an IT Modernization Information Systems Security Engineer (SCISSE) to join the Sea, Land, Air Analysis Group.

The role focuses on integrating cybersecurity requirements into system architecture from concept through deployment and across the full system lifecycle. You will develop security artifacts, perform threat modeling and vulnerability assessments, implement controls per NIST and CNSSI guidance, and collaborate with ISSOs, developers, and