Information Systems Security Engineer (ISSE)

Careerscape is recruiting on behalf of our client, a national-security technology organization in the Denver, CO area, for an Information Systems Security Engineer (ISSE) to strengthen system security and support authorization activities for mission-critical infrastructure. This on-site role supports a continuously operating system and includes occasional after-hours support. This position requires an active TS/SCI clearance with a CI polygraph and U.S. citizenship.

Responsibilities

• Develop Risk Management Framework (RMF) and Assessment and Authorization (A&A) packages, including System Security Plans
• Manage RMF documentation and workflow activities in ServiceNow
• Assess system vulnerabilities using ACAS, Splunk, and HBSS and coordinate remediation
• Apply Security Technical Implementation Guide (STIG) hardening to commercial off-the-shelf and open-source software
• Conduct continuous monitoring (ConMon) and maintain evidence of system security posture
• Track Plans of Action and Milestones (POA&Ms) with Information Systems Security Officers and Managers (ISSO/ISSM)
• Participate in Change Control Boards to evaluate the security implications of proposed changes
• Engineer Linux security controls for standalone systems and environments connected through LANs and WANs
• Provide occasional after-hours security support for a system operating 24/7

Requirements

• Active TS/SCI clearance with a CI polygraph and U.S. citizenship
• Certification meeting DoD 8570/8140 IAT Level II or higher requirements, such as Security+ or CISSP
• 4–6 years of experience in cybersecurity, systems engineering, or software engineering supporting government organizations or defense contractors
• Bachelor’s degree in information technology, cybersecurity, or a STEM field; 8 years of experience may substitute for the degree
• Experience preparing RMF/A&A packages and System Security Plans
• Experience using ServiceNow for RMF workflows
• Hands-on vulnerability assessment experience with ACAS, Splunk, and HBSS
• Experience applying STIG hardening to commercial off-the-shelf (COTS) and open-source software and performing continuous monitoring
• Experience tracking POA&Ms with ISSO/ISSM personnel and participating in Change Control Boards
• Linux security engineering experience across standalone and LAN/WAN environments
• Ability to work on-site and provide occasional after-hours support for a 24/7 operational system
• Experience implementing DISA STIGs preferred
• Experience analyzing Common Vulnerabilities and Exposures (CVEs) and Information Assurance Vulnerability Alerts (IAVAs) preferred
• Experience with Docker, Podman, or Kubernetes preferred
• Embedded systems experience preferred

Benefits

• Competitive salary ($170,000–$225,000 depending on experience)
• 401(k) with profit sharing
• Company-paid healthcare with HSA options
• Generous paid time off
• Performance bonuses
• Certification and tuition reimbursement