Information System Security Engineer

Location: Lorton, VA

Our client is seeking an experienced Information System Security Engineer (ISSE) to join our team in Lorton, Virginia.

The ISSE will support the development and sustainment of secure mission enclaves while providing enterprise cybersecurity services and cyber network defense capabilities. This position is responsible for conducting technical security assessments, engineering secure solutions, automating defensive cyber activities, and advising technical and program leadership on cybersecurity risks and mitigation strategies.

The ideal candidate will have hands-on experience with technologies such as ACAS, ePO, Splunk, STIG/SCAP, Microsoft Azure, Entra ID, Active Directory, Azure Automation, and YUM, along with a strong understanding of DoD cybersecurity requirements and security engineering principles.

Key Responsibilities

• Perform and review technical security assessments of computing environments to identify vulnerabilities, risks, and compliance gaps.

• Engineer cybersecurity solutions supporting Cyber Threat and Defensive Cyber Operations.

• Configure, deploy, integrate, and sustain cybersecurity tools such as ACAS, ePO, Splunk, STIG/SCAP, and YUM within cloud environments.

• Configure Microsoft Entra ID and Azure security services and tools in support of Authorization to Operate (ATO) requirements.

• Automate security monitoring, threat assessment, compliance, and reporting activities.

• Analyze system and organizational security posture trends and communicate findings to the ISSM and ISSO.

• Recommend cybersecurity controls, countermeasures, and mitigation strategies based on evolving threats and identified vulnerabilities.

• Implement security controls in accordance with applicable DoD cybersecurity policies and standards.

• Apply security engineering principles related to confidentiality, integrity, availability, authentication, and non-repudiation.

• Recommend and plan system modifications based on cybersecurity exercises, assessments, vulnerability testing, and security testing results.

• Evaluate identified risks and deficiencies and recommend appropriate mitigation or risk-acceptance strategies during certification and testing activities.

• Support the development, security, and sustainment of secure mission enclaves and enterprise cyber defense capabilities.

Required Qualifications

• Active TS/SCI security clearance.

• Active IAT/IAM/IASAE Level III certification, such as:

  • CISSP

  • CISM

  • CASP+ / SecurityX

  • Other qualifying DoD 8570/8140 Level III certification

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related technical field with 5–8 years of demonstrated professional experience.

• In lieu of a bachelor's degree, 10+ years of equivalent professional experience may be considered.

• Minimum 3 years of leadership experience.

• Demonstrated experience configuring, deploying, and sustaining cybersecurity tools within a cloud environment.

• Demonstrated experience configuring and provisioning cloud security services and tools.

• Hands-on experience configuring Microsoft Entra ID.

• Experience performing cybersecurity assessments and identifying technical vulnerabilities and compliance deficiencies.

• Knowledge of DoD cybersecurity requirements, security controls, and risk management practices.

Preferred Qualifications

• 5+ years of leadership experience within cybersecurity or a related technical discipline.

• Microsoft Azure technical certifications.

• Hands-on experience with Azure VPN Gateway.

• Experience with Azure Monitor and Log Analytics.

• Experience implementing and managing Azure security tools and services.

• Experience with cybersecurity automation and security monitoring.

• Experience supporting ATO, RMF, STIG, SCAP, vulnerability management, and DoD cybersecurity compliance activities.

Technical Skills

• Microsoft Azure

• Microsoft Entra ID

• Active Directory

• ACAS / Nessus

• Splunk

• McAfee/Trellix ePO

• STIG / SCAP

• Azure Automation

• Azure Monitor

• Log Analytics

• Azure VPN Gateway

• Vulnerability Management

• Cybersecurity Automation

• RMF / ATO

• DoD Cybersecurity Compliance

Additional Requirements

• Must reside within driving distance of Lorton, VA or be willing to relocate.

• Must be willing to work onsite.

• Must be willing and able to travel up to 10%.

• Pursuant to the requirements of the government contract, this position requires U.S. citizenship.