Senior Information Systems Security Engineer – ISSE

Jobtailor; Maryland; On-site; USD 140,000 - 180,000; Full time

Job summary

Jobtailor seeks a senior security engineer to design, implement, and maintain enterprise security architectures aligned with NIST RMF, DoD STIGs, and CIS benchmarks. The role covers security engineering across the SDLC, accreditation support, and integration of cybersecurity requirements into Windows, Linux, cloud, virtualization, and container platforms.

The candidate will lead vulnerability management, automations, and threat detection, contribute to technical documentation, and present risk

Qualifications

• Hands-on security engineering across SDLC and accreditation processes.
• Proven ability to design and implement enterprise security architectures.
• Experience with DoD RMF, STIGs, and NIST guidelines.

Responsibilities

• Design, implement, and maintain enterprise security architecture aligned with NIST RMF and DoD STIGs.
• Perform security engineering across the SDLC from requirements to accreditation.
• Integrate cybersecurity requirements across servers, cloud, virtualization, and containers.

Skills

Security engineering

Vulnerability management

Automation scripting

Technical documentation

Risk assessment

Leadership

Mentoring

System design

Tools

Tenable Nessus

CyberArk

Trellix ePO

Splunk Enterprise

VMware vSphere

Job description

• Design, implement, and maintain enterprise security architecture aligned with NIST RMF, DoD STIGs, CIS benchmarks, and organizational cybersecurity policies
• Perform security engineering across the system development lifecycle, including requirements analysis, design reviews, security testing, and accreditation support
• Integrate cybersecurity requirements into Windows and Linux servers, cloud infrastructure, virtualization platforms, and containerized applications
• Design, develop, implement, and integrate DoD information assurance architectures, systems, and components
• Support vulnerability management, security impact analysis, remediation, continuous monitoring, incident response, forensic investigations, and threat detection
• Develop automation scripts for vulnerability remediation, account auditing, compliance reporting, and security monitoring
• Engineer endpoint protection and hardening solutions using Trellix ePO, host-based firewalls, and application whitelisting
• Administer, configure, and troubleshoot CyberArk core modules
• Produce technical security documentation, architecture diagrams, standard operating procedures, and executive-level risk assessment reports
• Develop and conduct training programs and present technical briefings to leadership

Requirements

• Active TS/SCI security clearance required
• DoD 8570.1-M / DoD 8140 IAT Level III certification required, such as SecurityX, GCIH, CISA, or CISSP
• Strong networking background, including TCP/IP, firewalls, and VPNs
• Strong cloud security background, including AWS and Azure
• Strong background in Kubernetes and DevSecOps
• Deep understanding of NIST SP 800-161, NIST RMF, FedRAMP, Common Criteria, ATO package development, STIGs, and cybersecurity compliance
• Hands-on experience with Tenable Nessus, CyberArk, Trellix, Splunk Enterprise, VMware vSphere, GitLab, Microsoft Windows Server, Red Hat Enterprise Linux, and Ubuntu Linux
• Experience with PowerShell, Python, Bash, and Ansible scripting and automation
• Proven experience leading projects and mentoring junior ISSEs
• Ability to design, implement, and maintain enterprise security architecture
• Ability to perform security engineering across the system development lifecycle
• Ability to integrate cybersecurity requirements across server, cloud, virtualization, and containerized environments
• Ability to perform security impact analysis for system changes, software deployments, and infrastructure upgrades
• Ability to produce technical security documentation, architecture diagrams, standard operating procedures, and executive-level risk assessment reports
• Ability to present technical briefings to leadership

Core Competencies

Demonstrates expertise in designing and implementing enterprise security architecture aligned with NIST RMF and DoD STIGs, while integrating cybersecurity requirements across various environments. Proficient in vulnerability management, security engineering, and producing technical documentation and risk assessment reports.

Highest-signal resume keywords

• Active TS/SCI Security Clearance
• DoD 8570.1-M / DoD 8140 IAT Level III Certification
• NIST RMF Compliance
• Cloud Security (AWS, Azure)
• Kubernetes and DevSecOps

ATS Optimization Keywords

Hard Skills

• Security Engineering
• Vulnerability Management
• Automation Scripting (PowerShell, Python, Bash, Ansible)
• Technical Documentation Production
• Security Impact Analysis

Soft Skills

• Project Leadership
• Mentoring

Certifications & Qualifications

• SecurityX
• GCIH
• CISA
• CISSP

Industry Keywords

• NIST SP 800-161
• FedRAMP
• Common Criteria
• ATO Package Development
• STIGs

Tools & Technologies

• Tenable Nessus
• CyberArk
• Trellix ePO
• Splunk Enterprise
• VMware vSphere