Information Systems Security Engineer, TS//SCI with Counterintelligence Polygraph Required
$150,000–$185,000 year
On-siteAlexandria, Virginia, United States
Job Summary
Define and document system security requirements and technical controls while analyzing architectures to identify risks and vulnerabilities. Develop Authority to Operate-ready security architectures for AI, data, cloud, and enterprise systems, then integrate security controls into designs and implementations. Support Risk Management Framework activities, vulnerability remediation, and continuous monitoring to maintain evidence for security authorization packages. Partner with engineering teams to automate security checks, configure CI/CD pipelines, and harden systems in classified or restricted environments. Translate government security requirements into actionable engineering solutions for direct customer support and technical demonstrations.
Required Qualifications
- Active TS//SCI clearance
- Counterintelligence or Lifestyle Polygraph
- 3+ years of experience in information systems security engineering, cybersecurity, systems engineering, software engineering, or a related technical field
- Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, Information Systems, or a related discipline
- Strong understanding of system and application security principles
- Experience with NIST security frameworks and NIST SP 800-53
- Experience supporting RMF and/or ATO processes
- Understanding of secure software development and DevSecOps practices
- Experience evaluating technical architectures for security risks
- Experience with identity and access management, authentication, authorization, encryption, logging, and monitoring
- Strong technical documentation and communication skills
- Ability to work directly with engineers and translate security requirements into technical solutions
- Strong analytical and problem-solving skills
- Ability to operate independently in a fast-moving environment
Desired Qualifications
- Experience supporting the Department of Defense, Intelligence Community, or other federal customers
- Experience working in classified or air-gapped environments
- Experience with FedRAMP or other federal cloud authorization frameworks
- Experience with NIST SP 800-37, RMF, CNSSI, ICD, or DoD security requirements
- Experience with AWS, Azure, Kubernetes, Docker, or cloud-native architectures
- Experience with infrastructure-as-code such as Terraform
- Experience with CI/CD and DevSecOps tooling
- Experience with vulnerability scanning and security tools
- Experience with Splunk, SIEM platforms, endpoint monitoring, or security logging
- Experience with zero trust architectures and least-privilege access models
- Experience securing AI/ML, LLM, data, or knowledge management systems
- Experience with Python, Bash, PowerShell, or other scripting languages
- Security certifications such as CISSP, Security+, or equivalent
- Ability to obtain and maintain additional security clearance accesses to Special Access Programs (SAP) or Access Compensatory Control Measures (ACCM)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.