Senior Information System Security Engineer supporting FBI's ISSO/ISSE program to design and maintain a scalable methodology for categorizing complex IT systems by risk, architecture, and compliance requirements. This role combines technical security architecture expertise with labor mapping and cost recovery strategy to optimize security staffing allocation across diverse system portfolios.
What you'll do
- Design and maintain system categorization methodology incorporating architecture, security classification, FIPS-199 impact levels, NSS designation, hosting environment, CNSS 1253 overlays, and mission requirements
- Assess system architecture, interfaces, and hosting models (on-premises, Azure, AWS) to determine appropriate ISSO/ISSE support levels and technical requirements
- Analyze and distinguish technical support needs across traditional, hybrid, and cloud-based systems based on risk, complexity, and integration dependencies
- Translate technical system attributes into labor mapping recommendations aligned to ITSSS labor categories and seniority levels for chargeback and cost recovery
- Partner with ISSOs, system owners, architects, and program leadership to ensure categorization decisions are technically sound, repeatable, and documented
- Support RMF and system security engineering activities including security architecture reviews, control implementation analysis, boundary analysis, and system interconnection analysis
- Review and apply NIST, CNSS, and FBI guidance to maintain compliance and update methodology for emerging technologies and policy changes
Mission
This position supports the FBI under Objective 2: ISSO/ISSE Program Management, enabling the bureau to effectively differentiate and manage technical security support across traditional, hybrid, and cloud-based IT systems. The work directly informs security staffing, resource allocation, and compliance posture for FBI national security operations.
Required skills
- FIPS-199 assessment and implementation
- NIST SP 800-37 RMF process
- NIST SP 800-53 security controls
- CNSS 1253 overlay application
- System security architecture review and analysis
- On-premises and cloud environment assessment (Azure, AWS)
- Security control implementation and inheritance analysis
- Technical security documentation and authorization packages
- Risk categorization and mapping to staffing requirements
- System interconnection and boundary analysis