Senior Information Systems Security Engineer (ISSE)

Smart Synergies; Fort Belvoir (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Smart Synergies seeks a Senior Cybersecurity Information Systems Security Engineer (ISSE) to support US Army PEO Soldier at Ft. Belvoir, VA. The role centers on driving RMF Authority to Operate and ensuring secure cloud, on-prem, and hybrid systems.

The position requires an active Secret clearance and onsite presence at Ft. Belvoir. You will define security requirements, monitor compliance, review designs, and collaborate with ISSM and program teams to deliver trusted systems.

Qualifications

• BS degree in IT/Cybersecurity or related field from ABET/NCAE-C.
• Active SECRET clearance required.
• 5 years in system or security engineering for US Gov.
• Experience with DoD cloud environments (Azure, C2S, GovCloud).
• Ability to develop SSPs and POAMs.
• Familiarity with DoD STIGs, SRGs, NIST 800-53.
• Strong communication with technical and non-technical stakeholders.
• Certifications: GISF/CASP/CSSP/CSSLP/GSEC or willingness to obtain.

Responsibilities

• Define system security requirements with engineers and officials.
• Monitor cybersecurity requirements across system lifecycle.
• Advise government and contractor teams on cybersecurity.
• Review designs for cloud, on-prem, and hybrid solutions.
• Support RMF processes for ATO.
• Identify and remediate security control gaps.
• Conduct risk and vulnerability assessments and SSP maintenance.
• Support IATT, risk acceptance, and other ATO activities.
• Develop POAMs and ensure ATO packages are sound.
• Remediate vulnerabilities using DoD best practices.
• Provide dashboards for platform controls and logs.
• Work with interdisciplinary teams to deliver secure systems.

Skills

RMF/ATO

DoD regs

NIST 800-53

Cloud security

Vulnerability assessment

SSP/POAM

IATT

Education

ABET/NCAE-C degree

BS in IT/Cybersecurity

Tools

eMASS

Azure

GovCloud

Job description

**Overview:**

Our client is seeking a skilled Senior Cybersecurity Information Systems Security Engineer (ISSE) to support US Army PEO Soldier at Ft. Belvoir, Virginia. The ISSE will drive efforts that support software and hardware cybersecurity Risk Management Framework (RMF) Authority to Operate (ATO).

***This position requires an active Secret clearance and onsite presence at Ft. Belvoir, VA.***

Responsibilities:

• Define system security requirements in coordination with system engineers, program managers, and Authorizing Officials (or their delegates).
• Ensure continuous monitoring and verification of cybersecurity requirements throughout the system lifecycle.
• Provide cybersecurity advice and guidance to government stakeholders and contractor teams.
• Develop and review system security designs and architectures, including cloud, on-prem, and hybrid solutions.
• Support RMF processes, ensuring successful ATO acquisition and maintenance.
• Identify, mitigate, and track security control gaps and non-compliance issues.
• Conduct risk assessments, vulnerability assessments, and develop/maintain System Security Plans (SSPs).
• Support Interim Authority to Test (IATT), risk assessment/acceptance, and all other ATO related activities.
• Identify and interpret security control non-compliance to determine the impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program.
• In concert with ISSM, work with product teams to identify controls, develop appropriate mitigations, and develop and track Program of Action and Milestone (POAM) documents to ensure that ATO packages are technically sound before submission to the program cyber government staff for review.
• Advise system engineers on the best methods to remediate vulnerability findings using security scanning tools and DoD / Industry best practices.
• Support cybersecurity engineering analysis of alternatives, tradeoffs, and risk treatment decisions.
• Work with interdisciplinary teams to deliver trustworthy and secure systems.
• Be able to build and maintain dashboards including but not limited to Platform system controls, logs, and compliance monitoring.
• Experience with cloud cybersecurity implementations.
• Implement NIST SP 800-53 Revision 4 or 5 security requirements and NIST SP 800-53A security assessment procedures.

Core KSATs for DoD Cyber Workforce (DCWF):

• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.
• Knowledge of cybersecurity principles.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of specific operational impacts of cybersecurity lapses.
• Knowledge of cloud computing service models Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).
• Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.

**Qualifications:**

**Required Qualifications:**

• A BS degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering from an ABET accredited or NCAE-C designated institution Minimum active SECRET security clearance.
• 5 years of experience in system and/or security engineering within U.S. Government systems.
• Hands on experience working in government cloud environments (i.e., Azure, Amazon C2S, Commercial and/or GovCloud) implementing the security planning, design, and operations in a secure manner.
• Proven ability to develop and maintain RMF documentation such as System Security Plans (SSPs) and Plans of Action and Milestones (POAMs).
• Experience with DoD technology, systems, and command & control policies and procedures.
• Previous working experience with eMASS.
• Familiarity with security requirements for federal IT environments, including DoD cyber regulations, FedRAMP and FISMA.
• Knowledge of DoD STIGs, SRGs, and NIST SP 800-53 security requirements and assessment procedures.
• Strong communication and interpersonal skills for interacting with technical and non-technical stakeholders.
• GISF, SecurityX / CASP , CSSP, Cloud , CSSLP, GSEC or GSEC. If none, must be willing to obtain in first 30-days.

**Preferred Additional Qualifications:**

• Working knowledge of cloud security planning, design, and operations.
• Experience with systems engineering lifecycle processes and agile development methodologies.
• Experience with Continuous Integration/Continuous Delivery (CI/CD) frameworks and DevSecOps.
• Tactical military experience preferred.