Senior Information Systems Security Engineer (ISSE) – Hybrid

Wyetech is seeking a Senior Information Systems Security Engineer (ISSE) to support the design, development, implementation, and accreditation of secure information systems supporting Department of Defense (DoD) missions. This position will perform security assessments and support system and network designs encompassing multiple enclaves with differing data protection and classification requirements. The ISSE will collaborate with government stakeholders, system architects, developers, and engineering teams to implement security controls, manage system authorization activities, and strengthen the security posture of distributed architectures and cloud-based systems supporting big data applications.

Required Skills/Experience:

• Experience creating, reviewing, and maintaining system authorization documentation for completeness, accuracy, and compliance with federal and DoD policies.

• Strong understanding of DoD Risk Management Framework (RMF) processes and system accreditation requirements.

• Experience implementing DoD system accreditation processes, including RMF or DIACAP.

• Experience assessing operational risks associated with integrated open-source, Government Off-the-Shelf (GOTS), and Commercial Off-the-Shelf (COTS) software components.

• Experience utilizing vulnerability management systems, automated security scanning tools, and system accreditation systems of record.

• Experience interpreting and implementing Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).

• Experience performing security planning, vulnerability assessments, risk analysis, risk management, and mitigation activities.

• Strong understanding of NIST SP 800-53 security controls, control inheritance, and security authorization artifact generation.

• Working knowledge of TCP/IP protocols and services, computer architectures, and network topologies.

• Experience navigating security authorization workflows, uploading security artifacts, and managing Plans of Action and Milestones (POA&Ms) in eMASS, Xacta, or equivalent RMF systems of record.

• Experience designing and implementing secure networking, computing, and enclave environments.

• Experience supporting systems with multiple enclaves and differing data protection or classification requirements.

• Understanding of distributed architectures and cloud-based systems supporting big data applications.

• Experience recommending system-level security solutions and guiding development teams in implementing appropriate security controls.

• Experience supporting the design and implementation of trusted relationships among external systems and architectures.

• Knowledge of information assurance policies, procedures, and cybersecurity workforce requirements.

• Ability to establish and implement defensible security processes when established procedures are unavailable.

• Strong analytical, technical documentation, communication, and problem-solving skills.

• Ability to work independently and collaboratively with diverse technical teams and government stakeholders.

• Ability to work a hybrid schedule, averaging one (1) to two (2) days per week onsite in Columbia, Maryland, with flexibility to accommodate changes in mission requirements.

Preferred Skills:

• CISSP-ISSEP certification is highly desired.

• Experience with Bash scripting.

• Experience with Kubernetes container orchestration.

• Experience creating technical diagrams using Microsoft Visio or draw.io.

• Experience with Red Hat Enterprise Linux (RHEL).

• Experience with Amazon Web Services (AWS) cloud environments.

The Information Systems Security Engineer (ISSE) performs or reviews technical security assessments of computing environments to identify vulnerabilities, noncompliance with established Information Assurance (IA) standards and regulations, and appropriate mitigation strategies.

Validates and verifies system security requirements definitions and analyses and establishes secure system designs. Designs, develops, implements, and integrates IA and security systems and components for networking, computing, and enclave environments, including systems with multiple enclaves and differing data protection or classification requirements.

Incorporates information assurance into systems deployed to operational environments. Assists architects and systems developers in identifying and implementing appropriate information security functionality to ensure consistent application of Agency security policies and enterprise solutions.

Supports the development of security architectures and enforces the design and implementation of trusted relationships among external systems and architectures. Assesses and mitigates system security threats and risks throughout the program lifecycle.

Contributes to security planning, assessment, risk analysis, risk management, certification, and security awareness activities for system and networking operations. Reviews certification and accreditation documentation and provides feedback regarding completeness, accuracy, and compliance with applicable requirements.

Capabilities:

(U) Perform or review technical security assessments of computing environments to identify vulnerabilities and noncompliance with established information assurance standards and regulations.

(U) Recommend appropriate mitigation strategies to address identified system vulnerabilities and security deficiencies.

(U) Validate and verify system security requirements definitions and analyses.

(U) Establish system security designs based on applicable security requirements and operational objectives.

(U) Design, develop, implement, and integrate information assurance and security systems and system components.

(U) Support networking, computing, and enclave environments, including multiple enclaves with differing data protection and classification requirements.

(U) Incorporate information assurance requirements and security controls into systems deployed to operational environments.

(U) Assist system architects and developers in identifying and implementing appropriate information security functionality.

(U) Ensure consistent application of Agency security policies and enterprise security solutions.

(U) Support the development and implementation of secure system architectures.

(U) Enforce the design and implementation of trusted relationships among external systems and architectures.

(U) Assess and mitigate system security threats and risks throughout the program lifecycle.

(U) Develop, review, and maintain system authorization documentation in accordance with federal and DoD policies.

(U) Implement and support DoD RMF processes, including security control assessment, authorization, and continuous monitoring activities.

(U) Apply NIST SP 800-53 security controls, control inheritance concepts, and security authorization artifact requirements.

(U) Interpret and implement DISA STIGs and SRGs to support system hardening and security compliance.

(U) Utilize vulnerability management systems and automated security scanning tools to identify security weaknesses and assess compliance.

(U) Review vulnerability assessment results and recommend appropriate remediation and mitigation strategies.

(U) Manage security authorization workflows, documentation, and POA&Ms within eMASS, Xacta, or equivalent RMF systems of record.

(U) Assess operational risks associated with integrated open-source, GOTS, and COTS software components.

(U) Provide security planning, assessment, risk analysis, and risk management support for information systems and networking operations.

(U) Recommend system-level solutions to resolve security requirements and guide development teams in meeting security posture requirements.

(U) Apply information assurance policies, procedures, and security engineering principles to develop secure networking, computing, and enclave environments.

(U) Support secure system designs involving distributed architectures and cloud-based applications.

(U) Establish and execute defensible security processes when established procedures are unavailable.

(U) Collaborate with government stakeholders, system architects, developers, and engineering teams to ensure implementation of appropriate security measures.

(U) Review certification and accreditation documentation and provide recommendations regarding completeness, accuracy, and compliance.

Qualifications:

Candidates must meet one (1) of the following education and experience combinations:

• Bachelor's degree in Computer Science, Information Assurance, Information Security, Systems Engineering, or a related discipline from an accredited college or university, plus a minimum of nine (9) years of relevant experience as an ISSE supporting large, multi-tiered programs.

• Master's degree in a related technical discipline plus a minimum of seven (7) years of relevant experience.

• High School Diploma/GED plus a minimum of thirteen (13) years of relevant experience.

Additional qualifications:

• Experience implementing DoD system accreditation processes, including DIACAP or RMF, with RMF experience preferred.

• Working knowledge of TCP/IP protocols, computer architectures, and network topologies.

• Understanding of NIST SP 800-53 security controls, control inheritance, and artifact generation.

• Experience implementing DISA STIGs and SRGs and supporting vulnerability management, mitigation, and compliance processes.

• Experience reviewing automated security scanning results and identifying appropriate corrective actions.

• Hands-on experience navigating workflows, uploading security artifacts, and managing POA&Ms within eMASS, Xacta, or equivalent RMF systems of record.

• Must meet applicable DoD 8140 cybersecurity workforce qualification requirements and possess an IAT Level II certification as specified for the position. Examples include SSCP, Security+ CE, CCNA Security, or GSEC, subject to applicable qualification requirements.

• CISSP-ISSEP certification is highly desired.

• Ability to work independently and as part of a collaborative technical team.

• Must be willing to work a hybrid schedule, averaging one (1) to two (2) days per week onsite in Columbia, Maryland, with flexibility to accommodate schedule changes.

• Due to federal contract requirements, United States Citizenship and an active U.S. Government Secret security clearance are required.

At Wyetech, you’ll be at the center of an award-winning corporate culture, breaking technological barriers and solving real-world problems for our federal government customers. We are committed to hiring the best of the best, and in return, we offer a world-class, truly unique employee experience that is rare within our industry.

• Wyetech believes in generously supporting employees as they prepare for retirement. The company automatically contributes 20% of each employee's gross compensation to a Simplified Employee Pension (SEP) IRA, with no requirement for employee matching. All contributions are fully vested from day one, ensuring immediate ownership of retirement funds.

Additional benefits include:

• Wyetech provides a generous PTO plan of up to 200 hours annually, aligned with applicable state leave regulations. Employees have the flexibility to adjust their PTO allocation at the start of each calendar year, ensuring it meets their evolving needs.

Full-time employees have the option to participate in a variety of voluntary benefit plans including:

• A Choice of Medical Plan Options, some with Health Savings Account (HSA)

• Vision and Dental

• Life and AD&D Benefits

• Short and Long-Term Disability

• Hospital Indemnity, Accident, and Critical Illness Insurances

• Optional Identity Theft and Legal Protection Services

• Employee Referral Bonus Eligibility up to $10,000

• Mobility Among Wyetech-supported Contracts

• Various contract and work locations throughout Maryland, Virginia, Colorado, Texas, Utah, Alaska, Hawaii and OCONUS

• Various team-building events throughout the year, such as monthly lunches, summer company picnic, and an annual holiday party.

• Employees receive two complimentary branded clothing orders annually.

Hourly Pay Range: $77.03–$104.31

Hourly pay rates listed for this position serve as a general guideline and are not a guarantee of compensation. Compensation will vary dependent upon factors including but not limited to: Government contract rates; education; relevant prior work experience, knowledge, skills, and competencies; certifications; and geographic location. Hourly pay rates reflect the pre-benefit gross wage amounts.

Wyetech, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Affirmative Action Statement:

Wyetech, LLC is committed to the principles of affirmative action in all hiring and employment for minorities, women, individuals with disabilities, and protected veterans.

Accommodations:

Wyetech, LLC is committed to providing an inclusive and accessible hiring process. If you need any accommodations during the application or interview process, please contact Brittney Wood. at 844-WYETECH x727 or staffing@wyetech.com. We are happy to provide reasonable accommodations to ensure equal access to all candidates.

Wyetech Terms and Conditions:

1. Wyetech may reach out to you via SMS messages during the course of your Wyetech candidacy.

2. You can cancel the SMS service at any time. Just text "STOP" to the short code. After you send the SMS message "STOP" to us, we will send you an SMS message to confirm that you have been unsubscribed. After this, you will no longer receive SMS messages from us. If you want to join again, just sign up as you did the first time and we will start sending SMS messages to you again.

3. If you are experiencing issues with the messaging program you can reply with the keyword HELP for more assistance, or you can get help directly at IT@wyetech.com, 844-WYETECH (844-993-8324).

4. Carriers are not liable for delayed or undelivered messages

5. As always, message and data rates may apply for any messages sent to you from us and to us from you. If you have any questions about your text plan or data plan, it is best to contact your wireless provider.

6. If you have any questions regarding privacy, please read our privacy policy below.

Privacy Policy:

We collect your mobile number and related opt-in data for the delivery of SMS messages. Your mobile opt-in data and consent will not be shared with third parties or affiliates for marketing or promotional purposes.