Information Systems Security Engineer (ISSE)

Information Systems Solutions (ISS) is looking for a mid-level ISSE supporting the Office of Naval Intelligence.

The Information Systems Security Engineer (ISSE) is responsible for engineering, implementing, and maintaining security solutions across information systems and networks.

This role collaborates closely with system engineers, architects, cybersecurity analysts, developers, and program management to ensure systems are designed, built, and maintained in accordance with security best practices and applicable compliance frameworks (e.g., RMF, NIST, DoD, ISO).

100% onsite

Specific duties include, but are not limited to the following:

• Develop and maintain system security artifacts, including System Security Plans (SSP), Security Assessment Reports (SAR), POA&Ms, and STIG compliance documentation.
• Apply NAVINTEL ICD 503 Risk Management Framework (RMF) policies and DoD/Navy cybersecurity directives to system design and implementation.
• Collaborate with ISSOs, ISSMs, program managers, and system engineers to ensure security controls are correctly implemented.
• Support system categorization, control selection, and continuous monitoring per NIST SP 800-53 and RMF.
• Provide guidance on secure architecture, encryption, authentication, network security, and system hardening.
• Maintain familiarity with cloud environments (AWS, Azure), enterprise networks, and operating systems (Windows, Linux).
• Familiar with GRC tools such as eMASS and Xacta.
• Ability to work with key stakeholders to resolve vulnerabilities and answer STIG checklists.

Why Work For ISS?

At ISS we pride ourselves on providing an employee-focused and family first environment.

Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals.

We work to schedule regular social gatherings within the company to foster camaraderie.

ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career.

Certifications (IAT Level III) One of the following:

· CASP+

· CCNP Security

· CISA

· GCED

· GCIH

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related field (or equivalent experience).
• 3–6 years of experience in cybersecurity or information systems security engineering.
• Knowledge of NAVINTEL ICD 503 RMF Implementation Policies and DoD/Navy cybersecurity directives.
• Understanding of ISSO responsibilities per SECNAV M-5239.2.
• Experience with NIST SP 800-53, RMF, DoD STIGs, and secure system architecture principles.
• Familiarity with network architectures, operating systems, and cloud platforms.
• Strong understanding of encryption, authentication, network security, and secure design patterns.

• Hands-on experience with DevSecOps, CI/CD pipelines, or Infrastructure as Code (Terraform, Ansible).
• Knowledge of containerization (Docker, Kubernetes) and microservices security best practices.
• Experience with enterprise security solutions (SIEM, endpoint protection, IAM tools).
• Prior work on Navy or IC programs requiring TS/SCI clearance.
• Strong communication and documentation skills, capable of briefing leadership and technical teams.
• Comprehension of key virtualization concepts.
• Familiar with Cloud Computing, architecture and design/engineering concepts.
• Familiar with the use of various code repositories and their function such as Github/Gitlab.
• Understanding of the various distributions of LINUX.