About this opportunity
Omniscius lists this Information System Security Engineer opportunity in lorton, Virginia. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Our client is seeking an experienced Information System Security Engineer (ISSE) to join our team in Lorton, Virginia .
The ISSE will support the development and sustainment of secure mission enclaves while providing enterprise cybersecurity services and cyber network defense capabilities. This position is responsible for conducting technical security assessments, engineering secure solutions, automating defensive cyber activities, and advising technical and program leadership on cybersecurity risks and mitigation strategies.
The ideal candidate will have hands‑on experience with technologies such as ACAS, ePO, Splunk, STIG/SCAP, Microsoft Azure, Entra ID, Active Directory, Azure Automation, and YUM , along with a strong understanding of DoD cybersecurity requirements and security engineering principles.
Key Responsibilities
Perform and review technical security assessments of computing environments to identify vulnerabilities, risks, and compliance gaps.
Engineer cybersecurity solutions supporting Cyber Threat and Defensive Cyber Operations .
Configure, deploy, integrate, and sustain cybersecurity tools such as ACAS, ePO, Splunk, STIG/SCAP, and YUM within cloud environments.
Configure Microsoft Entra ID and Azure security services and tools in support of Authorization to Operate (ATO) requirements.
Automate security monitoring, threat assessment, compliance, and reporting activities.
Analyze system and organizational security posture trends and communicate findings to the ISSM and ISSO .
Recommend cybersecurity controls, countermeasures, and mitigation strategies based on evolving threats and identified vulnerabilities.
Implement security controls in accordance with applicable DoD cybersecurity policies and standards .
Apply security engineering principles related to confidentiality, integrity, availability, authentication, and non‑repudiation.
Recommend and plan system modifications based on cybersecurity exercises, assessments, vulnerability testing, and security testing results.
Evaluate identified risks and deficiencies and recommend appropriate mitigation or risk‑acceptance strategies during certification and testing activities.
Support the development, security, and sustainment of secure mission enclaves and enterprise cyber defense capabilities.
Required Qualifications
Active TS/SCI security clearance .
Active IAT/IAM/IASAE Level III certification , such as:
CISSP
CISM
CASP+ / SecurityX
Other qualifying DoD 8570/8140 Level III certification
Bachelor's degree in Computer Science, Cybersecurity, Engineering , or a related technical field with 5–8 years of demonstrated professional experience .
In lieu of a bachelor's degree, 10+ years of equivalent professional experience may be considered.
Minimum 3 years of leadership experience .
Demonstrated experience configuring, deploying, and sustaining cybersecurity tools within a cloud environment.
Demonstrated experience configuring and provisioning cloud security services and tools.
Hands‑on experience configuring Microsoft Entra ID .
Experience performing cybersecurity assessments and identifying technical vulnerabilities and compliance deficiencies.
Knowledge of DoD cybersecurity requirements, security controls, and risk management practices.
Preferred Qualifications
5+ years of leadership experience within cybersecurity or a related technical discipline.
Microsoft Azure technical certifications.
Hands‑on experience with Azure VPN Gateway .
Experience with Azure Monitor and Log Analytics .
Experience implementing and managing Azure security tools and services.
Experience with cybersecurity automation and security monitoring.
Experience supporting ATO, RMF, STIG, SCAP, vulnerability management, and DoD cybersecurity compliance activities.
Technical Skills
Microsoft Azure
Microsoft Entra ID
Active Directory
ACAS / Nessus
Splunk
McAfee/Trellix ePO
STIG / SCAP
Azure Automation
Azure Monitor
Log Analytics
Azure VPN Gateway
Vulnerability Management
Cybersecurity Automation
RMF / ATO
DoD Cybersecurity Compliance
Additional Requirements
Must reside within driving distance of Lorton, VA or be willing to relocate.
Must be willing to work onsite .
Must be willing and able to travel up to 10% .
Pursuant to the requirements of the government contract, this position requires U.S. citizenship .
#J-18808-Ljbffr
Worksite address
lorton, VA, 22199, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.