Senior Information Systems Security Engineer

Dine Development Corporation; Maryland; Ibrido; USD 120.000 - 160.000; Tempo pieno

Descrizione del lavoro

Dine Development Corporation is seeking a Senior Information Systems Security Engineer to bridge systems engineering and cybersecurity, designing, integrating, and enforcing security architectures across IT, cloud, or defense environments.

Responsibilities include secure architecture design, RMF/ATO leadership, implementing security baselines, and performing vulnerability assessments. Candidates should have public trust clearance and extensive experience in security operations.

Competenze

• Public Trust clearance required
• Bachelor's or Master's in STEM
• 10+ years of direct experience in systems engineering and information security operations
• Deep understanding of NIST SP 800-37 / 800-53, FIPS 199/200, and ICD 503
• Hands-on knowledge of secure configurations for Linux/Windows and cloud spaces (AWS GovCloud or Azure)
• Networking & security tools expertise (TCP/IP, firewalls, IDS/IPS, DLP, cryptography)
• Scripting in Python/PowerShell/Bash for automation
• CISSP certification highly preferred; ISSEP preferred; CISM/CASP+ certifications encouraged

Mansioni

• Secure Architecture Design: Engineer and integrate secure IA architectures, components, networks, and CDS
• RMF Execution: Lead RMF process to achieve and maintain an ATO
• Security Control Implementation: Define and implement security baselines and overlays (CNSS 1253, NIST SP 800-53)
• Vulnerability & Risk Assessments: Conduct vulnerability testing, threat modeling, POA&M reporting
• Technical SME: Advise PMs and engineers on security policy compliance
• Continuous Monitoring & Compliance: Design automated workflows, audit protocols, and patch management

Conoscenze

Security architecture

RMF / NIST

Cloud security

Python / PowerShell

Scripting / Automation

Formazione

Bachelor's or Master's in STEM

CISSP Certification

ISSEP Certification Preferred

CISM or CASP+ Certification

Strumenti

ACAS

HBSS

SIEM

DLP

Descrizione del lavoro

Job Title: Senior Information Systems Security Engineer

Location : Remote

Position Type: Full time

Req ID: JR100430

Description

We are seeking a Senior Information Systems Security Engineer to join our dynamic team. In this role, you will act as the vital bridge between systems engineering and cybersecurity. Their primary function is to design, integrate, and enforce security architectures within information technology, cloud, or defense systems from inception through the entire lifecycle.

Responsibilities

• Secure Architecture Design: Engineer and integrate secure Information Assurance (IA) architectures, system components, networks, and Cross Domain Solutions (CDS).
• Risk Management Framework (RMF) Execution: Lead systems through the federal NIST Risk Management Framework process to successfully achieve and maintain an Authorization to Operate (ATO).
• Security Control Implementation: Define, tailor, and implement specific security baselines and control overlays (such as CNSS 1253 or NIST SP 800-53) into system designs.
• Vulnerability & Risk Assessments: Conduct complex vulnerability testing, threat modeling, and boundary analysis using tools such as ACAS, HBSS, or SIEM platforms. Document findings in Plan of Action and Milestones (POA&M) reports.
• Technical Subject Matter Expertise: Advise Program Managers, external stakeholders, and systems/test engineers to ensure hardware and software engineering choices meet rigid security policies.
• Continuous Monitoring & Compliance: Design and manage automated workflows, audit protocols, and patch management strategies to verify ongoing system compliance.

Qualifications

• Clearance: Public Trust
• Education: Bachelor's or Master's degree in a STEM field (Computer Science, Cybersecurity, Systems Engineering, Information Technology, or related discipline).
• Experience: 10+ years of direct experience in systems engineering and information security operations.
• Framework Proficiency: Deep understanding of NIST SP 800-37 / 800-53, FIPS 199/200, and federal ICD 503 standards.
• Infrastructure & Cloud: Hands-on knowledge of secure configurations for Linux/Windows environments and cloud spaces (e.g., AWS GovCloud or Microsoft Azure).
• Networking & Security Tools: Expertise in TCP/IP, routing, firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), Data Loss Prevention (DLP), and cryptographic configurations.
• Scripting & Automation: Basic proficiency in scripting languages like Python, PowerShell, or Bash to automate security testing and repetitive validation tasks.
• CISSP (Certified Information Systems Security Professional) Highly Preferred.
• ISSEP (Information Systems Security Engineering Professional) Preferred.
• CISM (Certified Information Security Manager) or CASP+ (CompTIA Advanced Security Practitioner).

About Us

Din Development Corporation (DDC) is a Navajo Nationowned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.

Benefits

Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.

Equal Opportunity & Compliance Statement

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law.

We participate in E-Verify.

DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance [e-mail]

PI287578893