Information System Security Engineer (ISSE) supporting FBI's ISSO/ISSE Program to develop and maintain a scalable methodology for categorizing FBI IT systems by risk, architecture, and compliance posture. This role combines deep technical security expertise with program-level impact, directly influencing how the FBI allocates security resources and manages system compliance.
What you'll do
- Design and maintain a technical methodology to categorize FBI IT systems across dimensions including architecture, security classification, FIPS-199 impact level, hosting environment (on-prem/Azure/AWS), and mission criticality
- Assess complex system architectures, control implementations, and security implications to determine appropriate ISSO/ISSE support levels and staffing requirements
- Analyze traditional, hybrid, and cloud-based systems to distinguish technical support needs and map findings to labor categories and seniority levels
- Support RMF and security engineering activities including security architecture reviews, control analysis, boundary analysis, and system interconnection assessment
- Translate system technical attributes into actionable labor mapping and chargeback recommendations aligned to organizational reporting and cost recovery
- Partner with ISSOs, system owners, and program leadership to ensure categorization decisions are technically sound, documented, and repeatable
- Contribute to automated/semi-automated workflows for system categorization, reporting, and cost assignment; update logic when policy or technology changes occur
Mission
This position supports the FBI under the ISSO/ISSE Program Management initiative. The role is critical to establishing a repeatable, compliant framework for system categorization that aligns with FBI operational needs and federal security standards (NIST, CNSS, RMF). Success directly enables the FBI to optimize security engineering labor allocation and cost recovery across its enterprise IT portfolio.
Required skills
- FIPS-199 assessment and implementation
- NIST SP 800-37 RMF process
- NIST SP 800-53 security controls
- CNSS 1253 overlay application
- System security architecture review and analysis
- On-premises and cloud (Azure/AWS) security assessment
- Security documentation and authorization package development
- Risk categorization and technical mapping