Senior ISSE & RMF Engineer (TS/SCI with Poly)

GCI, Inc.; Tysons (VA); On-site; USD 143,000 - 238,000; Full time

Job summary

GCI, Inc. is seeking an Information Systems Security Engineer (ISSE) on-site in Tysons, VA. The role requires TS/SCI with Poly and deep RMF experience to lead security engineering across infrastructure, platforms, and applications.

The candidate must deliver ATO support, RMF artifacts, and incident response leadership, with hands-on expertise in SIEMs and cloud environments in federal contexts.

Qualifications

• NIST RMF expertise in federal environments.
• Experience with RMF ATO packages, control implementation, and assessments.
• Hands-on security engineering across infrastructure, platforms, and applications.
• Security incident detection, analysis, and response, including triage of alerts.

Responsibilities

• Serve as the Cyber Security Engineer SME, providing hands-on security engineering across all system layers (infrastructure, platform, and application).
• Engineer, implement, and validate security controls in accordance with NIST SP 800‑53 and RMF requirements.
• Lead and support RMF lifecycle activities (Categorize, Select, Implement, Assess, Authorize, Monitor).
• Perform security engineering for network architectures and boundary protections; Windows and Linux OS; storage and virtualization.
• Coordinate incident response and forensic activities; document incidents and lessons learned; develop runbooks and playbooks.
• Act as technical liaison for RMF artifacts including SSPs, SCAs, and POA&Ms; translate RMF to practical implementations.

Skills

RMF

NIST SP 800-53

NIST SP 800-37

NIST SP 800-30

SIEM

Incident response

Cloud security

DevSecOps

DoD overlays

Vulnerability management

Education

Bachelor’s degree in Cybersecurity, IT, or related field

Tools

Splunk

ELK Stack

ArcSight

QRadar

Job description

GCI, Inc. is seeking an Information Systems Security Engineer (ISSE) on-site in Tysons, VA. The role requires TS/SCI with Poly and deep RMF experience to lead security engineering across infrastructure, platforms, and applications.

The candidate must deliver ATO support, RMF artifacts, and incident response leadership, with hands-on expertise in SIEMs and cloud environments in federal contexts.