Information Systems Security Engineer (ISSE)

Information Systems Security Engineer 2 - Linthicum Heights, MD, USA - 225,000-235,000 per year Position Overview We are seeking a highly experienced Information Systems Security Engineer (ISSE) Level 2 to support mission-critical national security programs. The ideal candidate will possess deep expertise in cybersecurity engineering, Risk Management Framework (RMF), and secure system design within high-security environments. This role requires a proactive professional capable of ensuring compliance with federal security standards while supporting advanced cyber initiatives, including Zero Trust architectures. Key Responsibilities Apply the Risk Management Framework (RMF) in accordance with NIST SP 800-37 and NIST SP 800-53 to assess, authorize, and monitor systems Conduct comprehensive risk assessments, vulnerability analysis, and security evaluations Support the design, implementation, and maintenance of Zero Trust architectures Develop and maintain system security documentation, including SSPs, POA&Ms, and security controls Collaborate with system engineers, architects, and stakeholders to ensure secure system design and integration Evaluate security controls for effectiveness and compliance with federal and agency requirements Support continuous monitoring efforts and incident response activities Provide technical guidance on cybersecurity best practices and evolving threats Required Qualifications 14+ years of cybersecurity experience in engineering, compliance, or risk management Bachelor's degree (or higher) in a technical discipline (e.g., Cybersecurity, Computer Science, Information Systems, Engineering) Active TS/SCI clearance with Polygraph (NSA requirement) Fully cleared with MPO One of the following certifications: CISSP (Certified Information Systems Security Professional) CASP+ (or SecurityX equivalent) Desired Skills & Experience Strong expertise in: RMF implementation and lifecycle management NIST SP 800-53 security controls NIST SP 800-37 Risk Management Framework Security assessment and authorization (A&A) processes Experience working in classified or highly secure government environments Knowledge of Zero Trust security principles and architecture Preferred / Bonus Qualifications Experience supporting or familiarity with: NLCC (National Leadership Command Capability) NC3 (Nuclear Command, Control, and Communications) Nuclear Command and Control systems NSA cryptography methodologies and standards

What you'll do

- Apply RMF lifecycle (NIST SP 800-37, 800-53) to assess, authorize, and continuously monitor classified national security systems

- Develop and maintain system security documentation including SSPs, POA&Ms, and security control assessments

- Conduct risk assessments, vulnerability analyses, and security control effectiveness evaluations against federal and agency requirements

- Support design and implementation of Zero Trust architectures on mission-critical government systems

- Collaborate with systems engineers and architects to integrate security into system design from inception

- Support continuous monitoring programs and participate in incident response activities

- Provide authoritative technical guidance on cybersecurity engineering best practices and emerging threat landscape

Mission

National security / nuclear command and control (NC3/NLCC) systems security engineering within NSA-adjacent classified environments

Required skills

• Risk Management Framework (RMF)
• NIST SP 800-53 security controls
• NIST SP 800-37
• Security Assessment and Authorization (A&A)
• System Security Plan (SSP) development
• Zero Trust architecture
• Vulnerability analysis
• Continuous monitoring