Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE)

Hands-on Information Assurance and Information Systems security engineering role to secure, administer, harden, and maintain enterprise mission systems in Suitland, MD.

Responsibilities

• Act as a primary security engineering resource for enterprise infrastructure, supporting hands-on administration, configuration, security hardening, troubleshooting, and vulnerability remediation.
• Research and evaluate cybersecurity tools, technologies, and methodologies to identify opportunities to strengthen enterprise security.
• Support architecture and engineering reviews by providing security recommendations for new capabilities, technologies, and infrastructure changes.
• Troubleshoot complex security issues spanning storage, networking, operating systems, authentication, and broader enterprise infrastructure.
• Perform vulnerability assessments, ethical hacking, and penetration testing to identify and address security risks.
• Review and harden storage protocols and services, including NFS, SMB/CIFS, iSCSI, and associated management interfaces.
• Apply and validate DISA STIGs, SRGs, vendor security guidance, and industry security best practices.
• Configure and maintain secure administrative access using technologies and principles such as SSH, HTTPS/TLS, RBAC, centralized authentication, and least privilege.
• Develop and deliver training on cybersecurity tools, technologies, and processes.

Requirements

• Education and experience: Bachelor’s degree in Cybersecurity, Electrical Engineering, Information Technology, Information Assurance, or related field with 8+ or 12+ years experience; or Master’s degree with 6+ or 10+ years experience.
• Clearance: Active TS/SCI clearance in DISS with required program access.
• Security engineering experience, including experience with DoD RMF, ICD 503, and/or the NIST Risk Management Framework.
• Extensive experience with Intelligence Community (IC), DoD, DISA, NAVINTEL Cybersecurity, FLTCYBERCOM, and DoDIIS processes, tools, systems, reporting mechanisms, and requirements supporting Assessment and Authorization (A&A).
• Software development experience using Java, C, C++, or other programming or scripting languages, including designing and developing host based and network based scanning tools.
• Experience with SCAP (Security Content Automation Protocol) based tools and specifications.
• Experience installing, configuring, testing, deploying, operating, and maintaining enterprise network based scanning and reporting tools such as Trellix/ESS, ACAS, RedSeal, Evaluate STIG, SteelCloud ConfigOS, and STIG Manager.
• Extensive experience hardening modern Unix operating systems (e.g., Oracle Solaris 10/11 and RHEL) and Microsoft Windows environments using STIGs.
• Extensive experience securing systems and software in accordance with IC, DoD, and industry security best practices.
• Experience developing security controls, testing methodologies, and test procedures for systems, cloud based architectures, and Cross Domain Solutions (CDS).
• Demonstrated proactive, results-oriented approach and ability to build effective customer and team relationships.
• DoD 8140 IAM Level III approved baseline certification such as CISSP or SecurityX.

Technologies

• Java, C, C++
• SCAP
• Trellix/ESS, ACAS, RedSeal, Evaluate STIG, SteelCloud ConfigOS, STIG Manager
• SSH, HTTPS/TLS, RBAC
• NFS, SMB/CIFS, iSCSI
• DISA STIGs, SRGs
• DoD RMF, ICD 503, NIST Risk Management Framework
• Oracle Solaris 10, Oracle Solaris 11, RHEL

Benefits

• Competitive compensation
• Health and Wellness programs
• Income Protection
• Paid Leave and Retirement

Location: Suitland, MD (onsite)

Clearance: Active TS/SCI

Pay Range: USD 107,900 - 195,050 per year

Original Posting: October 30, 2026