Senior Information Systems Security Engineer (ISSE)

Amatriot Group; Glen Burnie (MD); On-site; USD 150,000 - 210,000; Full time

Job summary

The Amatriot Group is seeking a Senior Information Systems Security Engineer to design, implement and maintain enterprise security architecture in Annapolis Junction, MD. You will align with NIST RMF, DoD STIGs, CIS benchmarks, and organizational cybersecurity policies across the system development lifecycle.

You will perform security engineering, vulnerability management, and risk assessments, ensuring secure development and operations in Windows, Linux, cloud, and containerized environments.

Qualifications

• Experience in network and cloud security architectures.
• Familiarity with NIST RMF, DoD STIGs, and compliance processes.
• Experience with vulnerability management tools (Nessus, ACAS, Qualys).
• Scripting and automation using PowerShell, Python, Bash, Ansible.

Responsibilities

• Design and maintain enterprise security architecture aligned with NIST RMF/DoD STIGs.
• Perform security engineering across the SDLC and incident response support.
• Integrate cybersecurity requirements into Windows/Linux, cloud, virtualization, and containerized environments.
• Lead vulnerability management and remediation activities with stakeholders.
• Develop technical security documentation and risk assessments.

Skills

Networking

Cloud security

Kubernetes

DevSecOps

NIST RMF

Scripting

Tools

Tenable Nessus

CyberArk

Splunk Enterprise

VMware vSphere

Windows Server

Linux (RHEL/Ubuntu)

Ansible

Trellix

Job description

Location

Annapolis Junction MD

Security Clearance

Active TSSCI Required

Job Type

Full Time

Target Salary Range

150000 210000 This represents the potential salary range for this position depending on education level years of experience andor certifications in addition to other position specific requirements which may impact salary

Position Overview

The Senior Information Systems Security Engineer designs implements and maintains enterprise security architecture aligned with NIST RMF DoD STIGs CIS benchmarks and organizational cybersecurity policies This role performs security engineering across the system development lifecycle supports vulnerability management integrates cybersecurity requirements across enterprise environments and ensures development and operational systems are functional and secure

Key Responsibilities

Security Architecture and EngineeringDesign implement and maintain enterprise security architecture aligned with NIST RMF DoD STIGs CIS benchmarks and organizational cybersecurity policiesPerform security engineering activities across the system development lifecycle including requirements analysis system design reviews security testing and accreditation supportIntegrate cybersecurity requirements into Windows and Linux server environments cloud infrastructure virtualization platforms and containerized applicationsResponsible for the design development implementation and integration of DoD IA architectures systems or system components for use within computing network and enclave environmentsEnsure the architecture and design of development and operational systems are functional and secureSupport designs for program of record systems and special purpose processing nodes with platform IT interconnectivityVulnerability Management and ComplianceImplement vulnerability management processes using Tenable Nessus ACAS and Qualys to identify assess and remediate system vulnerabilitiesCollaborate with system administrators network engineers ISSOs and application teams to remediate security findings and implement secure configuration baselinesPerform security impact analysis for system changes software deployments and infrastructure upgrades to ensure continued compliance and operational securityDetermine security requirements by evaluating business strategies and requirements researching information security standards conducting system security and vulnerability analyses and risk assessments studying architecture and platforms identifying integration issues and preparing cost estimatesEstablish a framework by which cyber risk can be measured and quantified in the marketplaceSecurity Monitoring Incident Response and Threat DetectionSupport incident response and forensic investigations by analyzing security logs SIEM alerts network traffic and endpoint telemetry using Splunk EnterpriseMonitor analyze and detect cyber events and incidents within information systems and networks under general supervisionAssist with integrated dynamic cyber defenseCoordinate and maintain security toolsets to support continuous monitoring and ongoing authorization programsEvaluate and implement cybersecurity tools and technologies to improve system security posture continuous monitoring and threat detection capabilitiesSecurity Tools Automation and Endpoint ProtectionDevelop automation scripts using PowerShell Bash and Python to streamline vulnerability remediation account auditing compliance reporting and security monitoring tasksEngineer endpoint protection and hardening solutions using Trellix ePO On Prem host based firewalls and application whitelisting technologiesImplement security systems by specifying intrusion detection methodologies and equipment directing equipment and software installation and calibration preparing preventive and reactive measures creating transmitting and maintaining keys providing technical support and completing documentationVerify security systems by developing and implementing test scriptsAdminister configure and troubleshoot CyberArk core modules including Enterprise Password Vault Password Vault Web Access Central Policy Manager and Privileged Session ManagerDocumentation Training and Technical LeadershipProduce technical security documentation architecture diagrams standard operating procedures and executive level risk assessment reportsMaintain security by monitoring and ensuring compliance with standards policies and proceduresConduct incident response analysesDevelop and conduct training programsPresent technical briefings to leadership

Qualifications

ExperienceStrong background in networking including TCPIP firewalls and VPNs Strong background in cloud security including AWS and Azure Strong background in Kubernetes and DevSecOps Deep understanding of NIST SP 800 161 NIST RMF FedRAMP Common Criteria ATO package development and cybersecurity compliance including STIGs Hands on experience managing and deploying Tenable Nessus CyberArk Trellix Splunk Enterprise VMware vSphere GitLab Microsoft Windows Server Red Hat Enterprise Linux and Ubuntu Linux Experience with scripting and automation using PowerShell Python Bash and Ansible Proven experience leading projects and mentoring junior ISSEs

Skills

Ability to design implement and maintain enterprise security architectureAbility to perform security engineering across the system development lifecycleAbility to integrate cybersecurity requirements across server cloud virtualization and containerized environmentsAbility to perform security impact analysis for system changes software deployments and infrastructure upgradesAbility to produce technical security documentation architecture diagrams standard operating procedures and executive level risk assessment reportsAbility to present technical briefings to leadership

Certifications

DoD 85701 M DoD 8140 IAT Level III certification such as SecurityX GCIH CISA or CISSP Required