USAF - ISSE

cFocus Software Incorporated; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

cFocus Software Incorporated seeks an Information System Security Engineer (ISSE) to support USAF. This on-site role in Linthicum Heights, MD requires an active TS/SCI clearance and focuses on implementing and validating security controls across systems, networks, and cloud services.

Responsibilities include engineering secure configurations, integrating security into CI/CD, and maintaining RMF/ATO support documentation with a strong emphasis on collaboration with architecture, cybersecurity,

Qualifications

• Active TS/SCI clearance is required.
• Bachelor's degree in CS/IT or related field.
• Experience implementing and validating security controls for enterprise systems.
• Knowledge of RMF, authorization boundaries, control assessments, and compliance evidence.
• Experience with STIGs, secure configurations, vulnerability analysis, and remediation validation.
• Ability to engineer security across networks, operating systems, applications and cloud services.
• Experience scripting, IaC/CaC, source control, and security integration in CI/CD.
• Experience configuring logging, monitoring, alerting, and security tool integrations.
• Ability to document designs, test results, configurations, and remediation recommendations clearly.
• Strong collaboration skills across architecture, cybersecurity, development, and operations teams.

Responsibilities

• Translate security architecture, system requirements and DoD compliance into actionable controls.
• Implement and validate controls enforcing government-defined boundaries across infrastructure, apps and cloud.
• Engineer secure configurations for networks, servers, applications, and supporting services.
• Develop and maintain automation scripts applying STIGs and document configurations and diagrams.
• Integrate cybersecurity controls into CI/CD pipelines.
• Implement IaC and CaC using centralized repos and approved baselines; support automated security evaluation.
• Configure and validate logging, monitoring, observability, and alerting across boundaries.
• Analyze findings, recommend fixes, implement approved actions, verify remediation.
• Support security testing by defining validation steps and collecting evidence.
• Provide evidence, configuration records, test results, and monitoring data for RMF/ATO/cATO.

Skills

Active TS/SCI clearance

Security engineering across networks/O

Scripting / IaC / CaC / CI/CD security

RMF / DoD compliance knowledge

STIGs / secure configurations / vuln.

Logging / monitoring / alerting / tool

Documentation of designs / test data

Cross-team collaboration

Education

B.S. Computer Science / Information Technology / related field

Job description

cFocus Software seeks a Information System Security Engineer (ISSE) to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.

Qualifications:

• Active TS/SCI clearance
• B.S. Computer Science, Information Technology, or a related field
• Experience implementing and validating security controls for enterprise systems and infrastructure.
• Knowledge of RMF, authorization boundaries, control assessments, and compliance evidence.
• Experience with STIGs, secure configurations, vulnerability analysis, and remediation validation.
• Ability to engineer security across networks, operating systems, applications, and cloud services.
• Experience with scripting, IaC/CaC, source control, and security integration in CI/CD workflows.
• Experience configuring logging, monitoring, alerting, and security tool integrations.
• Ability to document designs, test results, configurations, and remediation recommendations clearly.
• Strong collaboration skills across architecture, cybersecurity, development, and operations teams

Duties:

• Translate Government-approved security architecture, system requirements, and DoD compliance requirements into implementable technical controls and engineering tasks.
• Implement and validate controls enforcing Government-defined authorization boundaries across assigned infrastructure, applications, and cloud services.
• Engineer secure configurations for networks, servers, applications, and supporting services; evaluate proposed changes for security and integration impacts.
• Develop and maintain automation scripts that apply Security Technical Implementation Guides (STIGs) and document system configurations and network diagrams from live environments.
• Integrate Government-specified cybersecurity controls and security guardrails into Continuous Integration/Continuous Deployment (CI/CD) pipelines.
• Implement Infrastructure as Code (IaC) and Configuration as Code (CaC) using centralized repositories and approved baselines; support automated security evaluation before production deployment.
• Configure and validate logging, monitoring, observability, and alerting across authorization boundaries in accordance with approved plans.
• Analyze vulnerability and configuration assessment findings; recommend corrective actions, implement approved fixes, and verify remediation effectiveness.
• Support security testing and assessments by defining technical validation steps, collecting evidence, and resolving identified engineering deficiencies.
• Provide technical evidence, configuration records, test results, and monitoring data supporting Risk Management Framework (RMF), Authorization to Operate (ATO), Assess-Only Authorization, and continuous ATO (cATO) activities.
• Support integration of Cybersecurity Service Provider (CSSP) capabilities and Government-approved cross-domain solutions within assigned security architecture and impact levels.
• Coordinate system-level findings and remediation status with ISSOs and the ISSM; supply engineering analysis for Plans of Action and Milestones (POA&Ms) and risk recommendations.
• Support incident response through approved technical procedures, log analysis, control corrections, and directed recovery or remediation activities.
• Maintain design and as-built documentation, configuration traceability, and implementation procedures; recommend improvements to security automation and monitoring.