Senior Information Security Engineer TS/SCI Poly

Redhorse Corporation; Chantilly (VA); On-site; USD 140,000 - 160,000; Full time

Job summary

Redhorse Corporation seeks a Senior Information System Security Engineer (ISSE) to provide expert IA services for national security networks. You will bridge complex technical requirements and business processes to keep systems compliant, secure, and resilient against evolving threats.

Key duties include defining security requirements, creating SSPs, developing ST&E plans, conducting risk and vulnerability assessments, and ensuring RMF, DIACAP, NIACAP compliance across programs.

Qualifications

• Active TS/SCI with FS Poly clearance required.
• Bachelor's degree in a related field as listed.
• 8+ years of information assurance and ISSE experience.
• Experience with certification and accreditation (C&A) of information systems.
• Hands-on with NIST SP 800-37 (RMF), DIACAP, NIACAP, or DCID 6/3.
• Proficiency in SSPs and vulnerability scanning.

Responsibilities

• Provide technical and programmatic IA services for security systems.
• Design and implement security requirements within business processes.
• Prepare security documentation using guidelines like NIST SP 800-37.
• Develop and execute ST&E plans to verify security controls.
• Conduct risk and vulnerability assessments and recommend mitigations.
• Develop security architectures and support incident investigations.

Skills

Information Assurance

RMF

NIST SP 800-37

C&A

SSP development

Vulnerability scanning

Security architecture

Incident response

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field

Tools

Jira

GitLab

DataBricks

Job description

Redhorse Corporation seeks a Senior Information System Security Engineer (ISSE) to provide expert IA services for national security networks. You will bridge complex technical requirements and business processes to keep systems compliant, secure, and resilient against evolving threats.

Key duties include defining security requirements, creating SSPs, developing ST&E plans, conducting risk and vulnerability assessments, and ensuring RMF, DIACAP, NIACAP compliance across programs.