Information System Security Engineer (Tier 3)

Intrinsic Resolution, LLC is seeking a Tier 3 Information System Security Engineer (ISSE) to support advanced cyber engineering work for the U.S. Department of Energy (DOE) and the National Nuclear Security Administration (NNSA) in Washington, DC. This onsite role supports NNSA Defense Nuclear Nonproliferation mission needs through engineering, assessments and consulting, training for domestic and international partners, and development of software and technological solutions for GMS missions.

Key Responsibilities

• Perform cyber engineering activities using advanced tool sets to support NNSA mission objectives.
• Provide solutions to complex problems using analysis and innovative methods, coordinating with subject matter experts and program managers across critical infrastructure, industrial control system (ICS) cybersecurity, and information security disciplines.
• Develop and deliver cybersecurity training to domestic and international partners.
• Support multi-disciplinary, multi-lab teams conducting facility assessments and consulting for DOE/NNSA’s DNN.
• Develop software and technological solutions in support of GMS missions.
• Collaborate with cybersecurity experts to share knowledge, recommendations, and complete deliverables.
• Design technical solutions independently and as part of a team by analyzing sponsor requirements, implementing software, and performing analyses to meet those requirements.
• Manage multiple parallel tasks and competing priorities across customers and stakeholders to meet deadlines.
• Assist architects and system developers in identifying and implementing information security functionality that aligns with agency security policy and enterprise solutions.
• Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.

Required Qualifications

• Active Top Secret clearance with a current investigation within the last 5 years (mandatory).
• On-site presence required at the Washington, DC facility; no remote or hybrid options.
• New hire start dates are strictly the 1st and 16th of each month.
• On-call support is required, with surge support outside normal business hours (EST) coordinated in advance whenever possible.
• Normal shift is Monday through Friday (EST), with start/end times varying based on commute and seating availability in secure spaces.
• 5+ years of cybersecurity engineering or a closely related technical discipline.
• Hands-on experience with Splunk, RSA, Tenable Nessus, and SELinux.
• Strong, demonstrated understanding of ports, protocols, and services.
• Working experience in Microsoft and Linux environments.
• Familiarity with Ansible, Tenable, GEMS, and SIMS/Sentris platforms.

Technologies

• Splunk
• RSA
• Tenable Nessus
• SELinux
• Microsoft
• Linux
• Ansible
• Tenable
• GEMS
• SIMS/Sentris
• SentinelOne
• Microsoft Endpoint Configuration Manager (MECM)

Preferred Qualifications

• Familiarity with SentinelOne endpoint detection and response (EDR).
• Familiarity with Intrusion Detection/Prevention Solutions (IDS/IPS).
• Familiarity with Microsoft Endpoint Configuration Manager (MECM).

Experience and Salary

• Experience (minimums): cybersecurity engineering (5 years); demonstrated understanding of ports, protocols, and services (3 years); working experience in Microsoft and Linux environments (1 year); developing and delivering cybersecurity training (3 years); Splunk (4 years); vulnerability management (3 years); enterprise network (3 years); Linux environment (2 years).
• Location: Washington, DC 20585 (onsite)
• Salary: USD 165,000 - 173,000 per year

Benefits

• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Education

A formal degree is not required. Relevant years of experience and demonstrated technical capability are weighted more heavily than academic credentials. Industry certifications such as CISSP, CEH, Security+, or equivalent are a plus.

Important Notice: Pre-Employment Screening and Counterintelligence

• Pre-Employment Drug Testing & Background Investigation: reviews and tests for the absence of illegal drugs (as defined in 10 CFR 707.4) will be conducted. A background investigation by the Federal Government may be required to obtain access authorization prior to employment, and reinvestigations may be required.
• Counterintelligence Evaluation Program (10 CFR Part 709): successful completion may include a counterintelligence-scope polygraph examination.

Application Questions

• Are you familiar with Ansible?
• Are you familiar with Tenable?
• Are you familiar with SIMS/Sentris platforms?