Information Systems Security Engineer

Sr. Information Systems Security Engineer (ISSE) role focused on protecting digital assets and sensitive information across containerized environments and DevSecOps pipelines with DoD/IC-aligned compliance.

Responsibilities

• Act as a security engineering SME for containerized environments, service mesh technologies, and microservices.
• Design, implement, and manage security controls for containerized workload solutions, including:
  • Image scanning
  • Firewalls
  • Intrusion detection/prevention systems
  • Endpoint protection
  • Encryption mechanisms
  • Runtime protection
  • RBAC (role-based access control)
  • Network segmentation
• Embed security into CI/CD and DevSecOps workflows, ensuring compliance with RMF, NIST SP 800-53, ICD 503, and FedRAMP requirements.
• Configure and optimize security monitoring and logging solutions and collaborate on container security tools such as Prisma Cloud or similar.
• Continuously monitor network traffic, system logs, and security alerts to detect and respond to potential incidents.
• Investigate anomalies and security breaches, take actions to mitigate risk, and develop/implement incident response plans for breaches, incidents, and related security concerns.
• Monitor and assess threat intelligence feeds, perform threat analysis, and conduct risk assessments to identify emerging threats and vulnerabilities.
• Collaborate with cross-functional teams (platform engineers, ISSOs, developers, IT, software development, compliance) to establish and enforce security policies, standards, and procedures across the system lifecycle.
• Conduct regular security assessments of container orchestration platforms, microservices, and APIs to identify vulnerabilities and recommend mitigations.
• Maintain accurate documentation for security architecture processes, control implementation procedures, configurations, and continuous monitoring strategies; produce detailed reports on findings, incidents, and actions taken.

Requirements

• Active TS/SCI with CI Poly security clearance.
• CISSP or equivalent certification to support DoD 8140 requirements.
• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 7+ years experience as a cybersecurity engineer focused on designing and implementing required security controls and performing continuous monitoring and auditing for compliance with security controls (examples include NIST SP 800-53, RMF, ICD 503, FISMA, FedRAMP).
• Strong skills specifying and implementing log collection into tools such as Splunk, including querying and analyzing aggregated logs to identify security-relevant anomalies and risks.
• Experience with security tools including Fortify, Acunetix, and Prisma Cloud.
• Proficiency in incident response, security incident handling, and forensic analysis techniques.
• Hands-on experience implementing and validating security controls within a containerized/Kubernetes/DevSecOps IL5/IL6+ environment.
• Experience performing periodic security checks to support continuous monitoring aligned with the NIST Risk Management Framework.
• Strong understanding of network protocols, operating systems, and infrastructure components.
• Effective communication skills to convey complex technical concepts to both technical and non-technical stakeholders.

Technologies

• Containerized environments
• Service mesh technologies
• Microservices
• Image scanning
• Firewalls
• Intrusion detection/prevention systems
• Endpoint protection
• Encryption mechanisms
• Runtime protection
• RBAC
• Network segmentation
• CI/CD pipelines
• DevSecOps
• RMF
• NIST SP 800-53
• ICD 503
• FedRAMP
• Security monitoring and logging solutions
• Prisma Cloud
• Splunk
• Fortify
• Acunetix
• Container security tools
• Container orchestration platforms
• Kubernetes
• API
• FISMA
• NIST Risk Management Framework

Benefits

• Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS
• 401k Contribution from Day 1
• PTO + 11 Paid Federal Holidays
• Long & Short Term Disability Insurance
• Group Term Life Insurance
• Tuition, Certification & Professional Development Assistance
• Workers’ Compensation
• Relocation Assistance

Candidate AI Usage Policy

• AI tools are an important part of daily work at ENS Solutions, and the company is committed to responsible and ethical use.
• Candidates are not permitted to use artificial intelligence or other assistive tools during interviews, whether in person or virtual, unless explicit permission has been granted in advance.

Location: Reston, VA (onsite)

Minimum experience: 7 years