Senior Information Security Engineer – Cloud & Risk

Jobtailor; Washington (District of Columbia); On-site; USD 110,000 - 170,000; Full time

Job summary

Jobtailor in Washington DC seeks an experienced ISSE to enhance and consolidate cybersecurity information assurance. You will support security impact assessments, testing, and remediation with operations and development teams.

You will design and implement security controls, verify architectures per security principles, and conduct risk analyses across the SDLC of new systems in a federal or regulated environment.

Qualifications

• 5 years of professional ISSE experience or similar in cybersecurity/IT.
• Experience performing IT product security specification reviews.
• Experience creating security baselines and performing security impact analyses.
• Understanding of the NIST RMF and related SPs (800-37, 800-53).
• Understanding of cloud solutions (IaaS, PaaS, SaaS).
• Cloud-related experience or certifications.
• Strong written and verbal communication; JCAM experience preferred.

Responsibilities

• Provide services to enhance, expand, or consolidate cybersecurity information assurance support.
• Support security impact assessments, security testing, remediation with teams.
• Plan, design and implement security controls to safeguard and monitor systems.
• Provide ISSE support to verify architectures and implementations per security principles.
• Identify security requirements and input to system design for built-in controls.
• Participate in planning and execution during SDLC of new systems.
• Conduct risk analysis and update risk assessments for changes to FISMA systems.

Skills

ISSE experience

Security impact analyses

Security testing

Risk analysis

NIST RMF knowledge

Tools

Cloud platforms (IaaS, PaaS, SaaS)

Security baselines

Security engineering

Job description

Jobtailor in Washington DC seeks an experienced ISSE to enhance and consolidate cybersecurity information assurance. You will support security impact assessments, testing, and remediation with operations and development teams.

You will design and implement security controls, verify architectures per security principles, and conduct risk analyses across the SDLC of new systems in a federal or regulated environment.