Senior ISSE: Enterprise Security Engineer (RMF/NIST)

VTG Defense; Herndon (VA); On-site; USD 130,000 - 170,000; Full time

Job summary

VTG Defense is seeking an Information Systems Security Engineer (ISSE) to design, implement, and maintain security controls across enterprise systems and networks, ensuring compliance and supporting mission-critical operations.

The ISSE will work with ISSOs, administrators, and developers to integrate security throughout the system lifecycle, perform RMF activities, and maintain SSP/POA&M/ATO packages while focusing on Windows/Linux environments and security tooling.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 5+ years of information security experience with a focus on system security engineering.
• Hands-on RMF experience and knowledge of NIST 800-53 controls.
• Experience developing and maintaining A&A documentation (SSP, POA&M, ATO).
• Knowledge of Windows and Linux security principles.

Responsibilities

• Design and implement security controls for information systems and networks.
• Support RMF lifecycle: categorization, control selection, implementation, assessment, and authorization.
• Conduct security assessments, vulnerability scans, and risk analysis.
• Develop and maintain SSP, POA&M, SAR documents.
• Ensure compliance with NIST, RMF, and organizational security policies.
• Collaborate to remediate vulnerabilities with ISSOs, admins, and developers.
• Support continuous monitoring and incident response activities.
• Implement and manage SIEM, IDS/IPS, and endpoint protection tools.
• Provide guidance on secure system architecture and design.
• Stay current on emerging threats and security technologies.

Skills

RMF

NIST 800-53

Vulnerability Scanning

A&A Documentation

SSP/POA&M/ATO

Windows / Linux

SIEM / IDS/IPS / Endpoint

Encryption / Identity Mgmt

Access Control

Threat Monitoring

Education

Bachelor's degree in Cybersecurity

Tools

ACAS

Nessus

Job description

VTG Defense is seeking an Information Systems Security Engineer (ISSE) to design, implement, and maintain security controls across enterprise systems and networks, ensuring compliance and supporting mission-critical operations.

The ISSE will work with ISSOs, administrators, and developers to integrate security throughout the system lifecycle, perform RMF activities, and maintain SSP/POA&M/ATO packages while focusing on Windows/Linux environments and security tooling.