Senior Cloud Information Security Engineer

Systems Planning and Analysis, Inc.; Lorton (VA); On-site; USD 180,000 - 210,000; Full time

Job summary

Systems Planning and Analysis, Inc. (SPA) seeks a Senior Cloud Information Systems Security Engineer (SCISSE) to integrate cybersecurity requirements into system architecture, design, and engineering from concept through deployment in complex DoD programs based in Virginia.

The SCISSE will develop security artifacts, perform threat modeling and vulnerability assessments, tailor security controls, and communicate risk, providing guidance across engineering teams and stakeholders.

Qualifications

• Master's degree in engineering, computer science, cybersecurity, networking, or programming.
• 12+ years of technical experience in cybersecurity, information technology, or systems engineering.
• TS/SCI with CI Polygraph, and the ability to maintain this throughout employment.

Responsibilities

• Support security engineering analyses, including threat modeling and vulnerability assessments.
• Select, tailor, and implement security controls in line with NIST SP 800-53 and other frameworks.
• Communicate engineering risk assessments, mitigation strategies, and risk-benefit recommendations to stakeholders.
• Assist with requirements analysis, system design, and integration for complex software applications and collaboration infrastructures.
• Contribute to security documentation, standard operating procedures, and governance frameworks.

Skills

Cloud architecture

Security engineering

Threat modeling

SAPs experience

Analytical skills

Risk assessment

Vulnerability management

Education

Master's degree in engineering / CS / cybersecurity / networking / programming

Tools

Java

Python

Ruby

C++

Job description

Systems Planning and Analysis, Inc. (SPA) seeks a Senior Cloud Information Systems Security Engineer (SCISSE) to integrate cybersecurity requirements into system architecture, design, and engineering from concept through deployment in complex DoD programs based in Virginia.

The SCISSE will develop security artifacts, perform threat modeling and vulnerability assessments, tailor security controls, and communicate risk, providing guidance across engineering teams and stakeholders.