Senior Information Systems Security Engineer (ISSE)
Job Description
The Senior Information Systems Security Engineer (ISSE) will help implement a Security Assessment and Authorization program and support the end-to-end RMF lifecycle for assigned information systems. The role emphasizes security engineering leadership, security-control expertise, and risk-focused support across assessment, authorization, and continuous monitoring activities.
On-site Location and Job Type
- Location: Washington, DC (onsite)
- Job Type: Contract
- Availability Note: This position is included in an active proposal and is contingent upon contract award.
Compensation
- Salary Range: USD 101,000 to 152,000 per year
- Additional Detail: targeted base salary range for this role is $101,000-$152,000 per year
Core Responsibilities
- Lead, mentor, and supervise security professionals supporting the end-to-end RMF lifecycle.
- Coordinate RMF Prepare activities, ensuring roles, responsibilities, and risk-management strategies are established and maintained.
- Guide information-system categorization based on mission or business impact and applicable regulatory requirements.
- Advise on selecting, tailoring, and documenting security controls.
- Oversee implementation of technical, operational, and management controls across system and application lifecycles.
- Plan, execute, and document security-control assessments.
- Prepare risk-management documentation that supports system authorization and executive decision-making.
- Direct continuous monitoring and related assessment activities.
- Provide technical cybersecurity expertise to support risk analysis, incident response, system remediation, and audit activities.
- Collaborate with technical personnel to address security configurations and resolve technical security gaps.
- Track and communicate security-engineering status, risks, and improvement opportunities to stakeholders.
- Maintain current knowledge of RMF, NIST guidance, and industry security practices.
Required Qualifications
- Experience: minimum 8 years in the secure design, analysis, and testing of information-security systems and products.
- Experience: minimum 8 years applying methods, standards, and approaches to ensure baseline security safeguards are implemented and documented.
- Experience: minimum 8 years developing and updating security test plans to identify and mitigate information-system risk.
- Certifications: must possess at least one of the following: CCISO, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, CPTE, CySA+, FITSP-A, GCSA, GSLC, GSNA.
- Clearance: TS/SCI Eligible.
Skills and Tools
- Frameworks and Guidance: RMF, NIST
Benefits
- Employee Ownership
- Continuous Learning: access to resources, training, and mentorship to support professional growth
- Inclusive Culture
- Mission-Driven Work: engage in projects that make a meaningful difference for clients and communities
- competitive and fair compensation
Additional Position Notes
- This role is contingent upon contract award. A proposal is currently underway, and candidates may be submitted as part of that effort.
- Initial assignment: support the unique needs of the client as a Senior Information Systems Security Engineer (ISSE).
- Team availability: 2 positions in Washington, DC and 1 position in Huntsville, AL (proposal-contingent).