Senior ISSE: RMF-Driven Security for Classified Systems

Amazon Inc.; Arlington (VA); On-site; USD 178,000 - 227,000; Full time

Job summary

Amazon Leo seeks a Senior Information Systems Security Engineer (ISSE) to raise the security bar for classified national security systems. You will own security across the full system lifecycle and collaborate with engineers, ISSMs/ISSOs, and authorizing officials to ensure secure architectures and operations.

The successful candidate will have hands-on knowledge of OS, networks, cloud, RMF, cryptography, and secure engineering, plus a TS/SCI clearance with SCI access.

Qualifications

• 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools.
• 5+ years of work in identifying security issues and risks, and developing mitigation plans
• 4+ years of scripting, programming, and security code review in common programming languages
• Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
• Experience as a mentor, tech lead or leading an engineering team

Responsibilities

• Own end-to-end security engineering for multiple concurrent classified systems and enclaves, establishing priorities, schedules, risks, dependencies, and decision paths with minimal direction.
• Lead system security architecture and design reviews; define security requirements, trust boundaries, control allocation, data flows, threat models, and defense-in-depth strategies for on-premises, cloud, hybrid, and disconnected environments.
• Drive RMF activities through authorization and continuous monitoring, including categorization, control tailoring, implementation guidance, assessment readiness, risk acceptance packages, significant-change analysis, and authorization maintenance.
• Develop and maintain high-quality authorization evidence, including system security plans, control implementation statements, security control traceability matrices, architecture diagrams, hardware/software inventories, test plans, assessment artifacts, risk assessments, plans of action and milestones, and continuous-monitoring records.
• Partner with system owners, ISSMs, ISSOs, architects, administrators, developers, security control assessors, authorizing officials, customers, and facility/industrial-security teams to resolve findings and make well-reasoned risk decisions.
• Engineer and validate secure configurations using applicable government security standards and baselines.
• Lead technical investigations of vulnerabilities, incidents, control failures, and anomalous results for the applicable environments; determine root cause, assess mission impact, define containment and remediation, and create mechanisms that prevent recurrence.
• Build automation, reusable templates, dashboards, and quality checks that reduce manual effort, shorten authorization cycle time, improve evidence consistency, and provide leadership with actionable measures of residual risk.
• Make and document security trade-offs that distinguish non-negotiable risk from reversible decisions; elevate clearly when mission, schedule, and security objectives conflict.
• Mentor engineers and security practitioners, conduct peer reviews, raise documentation and engineering standards, and serve as a trusted technical resource across programs.

Skills

Log analysis

System troubleshooting

Scripting

Programming languages

Mentorship

Job description

Amazon Leo seeks a Senior Information Systems Security Engineer (ISSE) to raise the security bar for classified national security systems. You will own security across the full system lifecycle and collaborate with engineers, ISSMs/ISSOs, and authorizing officials to ensure secure architectures and operations.

The successful candidate will have hands-on knowledge of OS, networks, cloud, RMF, cryptography, and secure engineering, plus a TS/SCI clearance with SCI access.