Information Systems Security Engineer

On site Information Systems Security Engineer role in a classified environment, focusing on RMF and A&A, security controls, and continuous monitoring. Requires an active TS/SCI with Polygraph and IASAE Level II certification. Location: Clarksburg, MD.

Benefits

• Medical
• Dental
• Vision
• Spending accounts
• Life insurance
• Voluntary plans
• 401(k) plan

Role Overview

The Information Systems Security Engineer will support mission-critical work in a classified setting, applying cybersecurity engineering best practices across design, implementation, authorization, and ongoing compliance. The role involves work onsite in Clarksburg, MD and requires active TS/SCI with Polygraph and IASAE Level II certification.

Responsibilities

• Support the full RMF lifecycle for classified systems from planning through continuous monitoring
• Contribute to A&A packages and help maintain ATOs over time
• Implement, assess, and validate security controls and technical requirements
• Build and maintain RMF documentation and body of evidence artifacts
• Support system boundary definition and security architecture documentation
• Run and analyze compliance and vulnerability scans; validate results, including false positives
• Support STIG implementation, configuration hardening, and remediation verification
• Assist with patch validation and ongoing security compliance activities
• Participate in Continuous Monitoring activities and reporting

Requirements

• Active TS/SCI with Polygraph security clearance
• DoD 8570/8140 IASAE Level II compliant certification (required)
• Strong working knowledge of RMF
• Experience supporting A&A activities and ATO processes
• Experience implementing and validating security controls and supporting continuous monitoring
• Familiarity with NIST SP 800-37 and NIST SP 800-53 (Rev. 3 and/or Rev. 5)
• Experience with RMF cybersecurity tools such as LATTEART, XACTA, BISCOTTI, WATCHCAT, STE
• Experience using compliance and configuration scanning tools
• Strong documentation, analytical, and troubleshooting skills

Technologies

• LATTEART
• XACTA
• BISCOTTI
• WATCHCAT
• STE

Certifications (IASAE Level II)

• CISSP
• CASP+
• CCSP
• CSSLP

Nice to Have

• Experience working in classified cybersecurity environments
• Familiarity with enterprise Linux, networking, and cloud environments
• Experience partnering with ISSOs, ISSMs, SCAs, and System Owners
• Experience supporting large-scale enterprise or mission systems
• Exposure to vulnerability management automation and reporting workflows