Information System Security Engineering (ISSE) Onsite
Core
Implement, assess, and maintain cybersecurity controls for classified DoD information systems and networks to ensure compliance with security requirements and maintain Authorization to Operate (ATO).
Role type
Senior IC Information Systems Security Engineer (ISSE)
Builds
Classified DoD systems and networks
Domain
Defense / Cybersecurity
Required skills
Risk Management Framework (RMF), NIST 800-53 security controls, System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), Authority to Operate (ATO) packages, DISA STIGs/SRGs, vulnerability assessment, security architecture design
Preferred skills
Intelligence Community (IC) program support, eMASS, ACAS/Nessus, Continuous Monitoring (ConMon), cloud security (Azure GovCloud/AWS GovCloud), DevSecOps
Technologies
eMASS, ACAS, Nessus, Azure Government, AWS GovCloud
Responsibilities
Support implementation and maintenance of cybersecurity requirements throughout the system development lifecycle; Apply RMF principles for system authorization and continuous monitoring; Develop and update security documentation (SSPs, SARs, POA&Ms); Analyze systems to identify risks and compliance gaps; Implement and validate security controls per NIST SP 800-53; Evaluate vulnerability scans and coordinate remediation; Collaborate with developers and engineers to integrate security requirements; Participate in audits, inspections, and compliance reviews. (via careerplan.io/jobs/79-00B-6E-275-A5-509-information-system-security-engineering-isse-onsite)
Seniority
Senior, hands-on IC
