Information Systems Security Engineer
Job Description
The Information Systems Security Engineer will deliver cybersecurity engineering and Assessment and Authorization support across a Sponsor portfolio, ensuring security requirements are integrated across the system lifecycle and authorization artifacts remain accurate and current.
Location and Work Model
Chantilly, VA (hybrid)
Compensation
USD 190,000 - 210,000 per yearly
Responsibilities
- Define, document, and maintain cybersecurity and information assurance requirements for Sponsor systems and applications.
- Support Assessment and Authorization activities across the system lifecycle in line with Sponsor policy and the applicable Risk Management Framework.
- Develop and maintain system security plans, control implementation statements, architecture diagrams, risk assessments, assessment evidence, and authorization artifacts.
- Coordinate with architects, engineers, developers, administrators, testers, and system owners to incorporate security into system design and implementation.
- Evaluate proposed changes to systems, software, infrastructure, networks, data, and configurations for cybersecurity impact.
- Coordinate vulnerability scanning, secure configuration assessments, remediation tracking, and validation of corrective actions.
- Support continuous monitoring, recurring security control assessments, audit preparation, and ongoing authorization activities.
- Track security findings, risks, mitigations, exceptions, and Plans of Action and Milestones through closure.
- Review access controls, authentication, authorization, encryption, logging, auditing, interfaces, data flows, and boundary protections to support compliance and risk management.
- Provide cybersecurity guidance during incident response, deployments, system transitions, and operational changes.
- Maintain security documentation, evidence repositories, assessment records, control mappings, and authorization status.
- Communicate cybersecurity risks, requirements, findings, and remediation priorities to technical and non-technical stakeholders.
- Participate in design reviews, technical exchanges, change-control activities, and security working groups.
Required Qualifications
- Active TS/SCI with Poly.
- Professional experience performing information systems security engineering, security authorization, or information assurance work for complex systems.
- Knowledge of security control implementation, risk assessment, vulnerability management, secure configuration, and continuous monitoring.
- Experience producing and maintaining cybersecurity documentation, control evidence, risk records, and authorization packages.
- Ability to collaborate with technical teams and translate security requirements into implementable engineering actions.
- Strong technical writing, organization, analysis, and stakeholder communication skills.
- Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent relevant experience.
Nice to Have
- Experience supporting Intelligence Community, Department of Defense, or other federal Assessment and Authorization processes.
- Relevant cybersecurity certification such as Security+, CISSP, CGRC, CASP+/SecurityX, or equivalent.
- Experience securing cloud, hybrid, containerized, data-intensive, or DevSecOps environments.
Benefits
- Flexible PTO Policy + 11 Paid Holidays
- Flexible Work Schedules (Remote / Hybrid)
- Medical / Dental / Vision / Flexible Spending Account (FSA)
- 401k Plan with Match
- Tuition & Professional Development Support
- Commuter Benefits
- Bonus & Employee Referral Programs
- Career Growth Opportunities
Company Overview
For over 25 years, Edgesource Corporation has supported innovative technology services for the Department of War (DOW), Department of Homeland Security (DHS), Department of State (DOS), the U.S. Intelligence Community, Law Enforcement, and other federal, state, and commercial clients locally, nationally, and abroad.
Working at Edgesource
Edgesource is an ISO 9001:2015 certified and CMMI Level 3 appraised small business, specializing in technical solutions including software development, database services, enterprise networking, data center virtualization, and management support.
Equal Opportunity and Accommodation
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Edgesource is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities.
To request reasonable accommodation, contact the Recruiting Department by email at [email protected] or by phone at (703) 837-0550.