Information Systems Security Engineer (ISSE)

ISSE supporting the Office of Naval Intelligence. The Information Systems Security Engineer (ISSE) is responsible for engineering, implementing, and maintaining security solutions across information systems and networks. This role collaborates closely with system engineers, architects, cybersecurity analysts, developers, and program management to ensure systems are designed, built, and maintained in accordance with security best practices and applicable compliance frameworks (e.g., RMF, NIST, DoD, ISO).

Specific duties include, but are not limited to the following:

• Develop and maintain system security artifacts, including System Security Plans (SSP), Security Assessment Reports (SAR), POA&Ms, and STIG compliance documentation.
• Apply NAVINTEL ICD 503 Risk Management Framework (RMF) policies and DoD/Navy cybersecurity directives to system design and implementation.
• Collaborate with ISSOs, ISSMs, program managers, and system engineers to ensure security controls are correctly implemented.
• Support system categorization, control selection, and continuous monitoring per NIST SP 800-53 and RMF.
• Provide guidance on secure architecture, encryption, authentication, network security, and system hardening.
• Maintain familiarity with cloud environments (AWS, Azure), enterprise networks, and operating systems (Windows, Linux).
• Familiar with GRC tools such as eMASS and Xacta.
• Ability to work with key stakeholders to resolve vulnerabilities and answer STIG checklists.

Certifications (IAT Level III)

One of the following:

• CASP+
• CCNP Security
• CISA
• CISSP (or Associate)
• GCED
• GCIH

Required Skills

Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field (or equivalent experience).

36 years of experience in cybersecurity or information systems security engineering.

Knowledge of NAVINTEL ICD 503 RMF Implementation Policies and DoD/Navy cybersecurity directives.

Understanding of ISSO responsibilities per SECNAV M-5239.2.

Experience with NIST SP 800-53, RMF, DoD STIGs, and secure system architecture principles.

Familiarity with network architectures, operating systems, and cloud platforms.

Strong understanding of encryption, authentication, network security, and secure design patterns.

Preferred Qualifications

Hands-on experience with DevSecOps, CI/CD pipelines, or Infrastructure as Code (Terraform, Ansible).

Knowledge of containerization (Docker, Kubernetes) and microservices security best practices.

Experience with enterprise security solutions (SIEM, endpoint protection, IAM tools).

Prior work on Navy or IC programs requiring TS/SCI clearance.

Strong communication and documentation skills, capable of briefing leadership and technical teams.

Comprehension of key virtualization concepts.

Familiar with Cloud Computing, architecture and design/engineering concepts.

Familiar with the use of various code repositories and their function such as Github/Gitlab.

Understanding of the various distributions of LINUX.