Senior Information Systems Security Engineer (ISSE)

Applied Information Sciences; Washington (District of Columbia); On-site; USD 101,000 - 152,000; Full time

Benefits offered by this job

Employee Ownership

Continuous Learning

Inclusive Culture

Mission-Driven Work

Competitive compensation

Job summary

Cybersecurity Jobs is seeking a Senior Information Systems Security Engineer to lead security efforts across the end-to-end RMF lifecycle in Washington, DC. This contract role involves directing assessments, authorizations, continuous monitoring, and risk analysis with senior security professionals.

Requirements include 8+ years in secure design and testing of information-security systems, plus TS/SCI eligibility and one of multiple certifications.

Qualifications

• Minimum 8 years in secure design, analysis, and testing of information-security systems.
• Minimum 8 years applying methods and standards to ensure baseline security safeguards.
• Minimum 8 years developing and updating security test plans.
• TS/SCI Eligible clearance.

Responsibilities

• Lead, mentor, and supervise security professionals across the RMF lifecycle.
• Coordinate RMF Prepare activities with defined roles and risk-management strategies.
• Guide system categorization based on mission impact and regulatory requirements.
• Advise on selecting, tailoring, and documenting security controls.
• Oversee implementation of controls across system and application lifecycles.
• Plan, execute, and document security-control assessments.
• Prepare risk-management documentation for system authorization and executive decisions.
• Direct continuous monitoring and related assessment activities.
• Provide cybersecurity expertise for risk analysis, incident response, and audit activities.
• Collaborate to address security configurations and gaps.

Skills

Security leadership

RMF lifecycle

Risk assessment

Security controls guidance

Education

CCISO

CISA

CISM

CISSO

CISSP

CISSP-ISSEP

CPTE

CySA+

FITSP-A

GCSA

GSLC

GSNA

Tools

RMF

NIST

Job description

The Senior Information Systems Security Engineer (ISSE) will help implement a Security Assessment and Authorization program and support the end-to-end RMF lifecycle for assigned information systems. The role emphasizes security engineering leadership, security-control expertise, and risk-focused support across assessment, authorization, and continuous monitoring activities.

On-site Location and Job Type

• Location: Washington, DC (onsite)
• Job Type: Contract
• Availability Note: This position is included in an active proposal and is contingent upon contract award.

Compensation

• Salary Range: USD 101,000 to 152,000 per year
• Additional Detail: targeted base salary range for this role is $101,000-$152,000 per year

Core Responsibilities

• Lead, mentor, and supervise security professionals supporting the end-to-end RMF lifecycle.
• Coordinate RMF Prepare activities, ensuring roles, responsibilities, and risk-management strategies are established and maintained.
• Guide information-system categorization based on mission or business impact and applicable regulatory requirements.
• Advise on selecting, tailoring, and documenting security controls.
• Oversee implementation of technical, operational, and management controls across system and application lifecycles.
• Plan, execute, and document security-control assessments.
• Prepare risk-management documentation that supports system authorization and executive decision-making.
• Direct continuous monitoring and related assessment activities.
• Provide technical cybersecurity expertise to support risk analysis, incident response, system remediation, and audit activities.
• Collaborate with technical personnel to address security configurations and resolve technical security gaps.
• Track and communicate security-engineering status, risks, and improvement opportunities to stakeholders.
• Maintain current knowledge of RMF, NIST guidance, and industry security practices.

Required Qualifications

• Experience: minimum 8 years in the secure design, analysis, and testing of information-security systems and products.
• Experience: minimum 8 years applying methods, standards, and approaches to ensure baseline security safeguards are implemented and documented.
• Experience: minimum 8 years developing and updating security test plans to identify and mitigate information-system risk.
• Certifications: must possess at least one of the following: CCISO, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, CPTE, CySA+, FITSP-A, GCSA, GSLC, GSNA.
• Clearance: TS/SCI Eligible.

Skills and Tools

• Frameworks and Guidance: RMF, NIST

Benefits

• Employee Ownership
• Continuous Learning: access to resources, training, and mentorship to support professional growth
• Inclusive Culture
• Mission-Driven Work: engage in projects that make a meaningful difference for clients and communities
• competitive and fair compensation

Additional Position Notes

• This role is contingent upon contract award. A proposal is currently underway, and candidates may be submitted as part of that effort.
• Initial assignment: support the unique needs of the client as a Senior Information Systems Security Engineer (ISSE).
• Team availability: 2 positions in Washington, DC and 1 position in Huntsville, AL (proposal-contingent).