Senior Information System Security Engineer (ISSE) supporting the FBI to design and maintain a scalable methodology for categorizing IT systems by architecture, security posture, risk, and operational requirements. This role combines deep technical security expertise with program-level impact to ensure proper staffing allocation and compliance across diverse FBI systems.
What you'll do
- Design and maintain methodology for categorizing FBI IT systems by architecture, security classification, FIPS-199 impact level, hosting environment, and mission requirements
- Assess complex system architectures (on-premises, Azure, AWS, hybrid) to determine appropriate ISSO/ISSE support levels and technical engineering effort
- Analyze security control implications, inheritance, boundary conditions, and system interconnections to inform risk categorization and compliance obligations
- Translate technical system attributes into labor mapping recommendations aligned with ITSSS labor categories and seniority levels for cost recovery and staffing allocation
- Partner with ISSOs, system owners, and program leadership to ensure categorization decisions are technically sound, repeatable, and documented
- Support RMF and system security engineering activities including security architecture reviews, control implementation analysis, and authorization package documentation
- Review and apply NIST SP 800-37/53, CNSS 1253, and FBI guidance to maintain compliance; support updates to categorization framework as technologies and requirements evolve
Mission
Agile Defense supports the FBI's Objective 2: ISSO/ISSE Program Management initiative. This role directly enables the FBI's ability to manage security engineering resources effectively across its portfolio of on-premises, hybrid, and cloud-based systems by creating a technically sound, repeatable categorization framework aligned with federal standards (NIST, CNSS, RMF).
Required skills
- FIPS-199 assessment and implementation
- NIST SP 800-37 RMF process
- NIST SP 800-53 security controls
- CNSS 1253 overlay application
- System security architecture review
- Cloud security (Azure, AWS)
- Security control implementation analysis
- Technical documentation for authorization packages
- Risk categorization and mapping
- System interconnection and boundary analysis