Information System Security Engineer Job at LufCo (Annapolis Junction)

System Security Engineer

As a system security engineer, you play a pivotal role in securing our hardware ...

Location

United States , Annapolis Junction

Salary:

99000.00 - 225000.00 USD / Year

Booz Allen Hamilton

Expiration Date

Until further notice

Requirements

4+ years of experience as a systems security engineer in programs that encompass systems security architecture development, requirements analysis, design, production, integration, test, and transition into operations
4+ years of experience performing Information Systems Security Officer functions in support of USCYBERCOM or IC projects and offices
4+ years of experience working with the Risk Management Framework (RMF) process
Experience assessing security vulnerabilities in software or systems and implementing mitigations
Experience working on teams using Agile technologies, including Atlassian Suite
Experience working with Amazon Web Services (AWS) cloud technology
Top Secret clearance
Bachelor’s degree in CS, Computer Engineering, or Information Systems
DoD 8570 compliant IAT Level II Certification

Job Responsibility

Guide your team of professionals as they maintain existing applications and keep systems working in sustainment mode
Use programming and scripting languages, including Python and Bash, to continuously enhance and maintain the application, troubleshoot any issues that arise operationally, and upgrade the system to meet security requirements
Advise our government clients on the best ways to improve and modernize the existing systems

What we offer

Health, life, disability, financial, and retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program

Senior System Security and Information Assurance Engineer

The Senior PAM Engineer will play a critical role within Line of Effort 2, respo...

Location

United States , Tampa

Salary:

Not provided

Barbaricum

Expiration Date

Until further notice

Requirements

Active DoD Top Secret clearance with SCI eligibility
Master’s degree (MA/MS) in Cybersecurity, Information Technology, Computer Science, Engineering, or related field
10+ years of professional experience in cybersecurity, systems engineering, or information assurance
Meets Cyber Engineer – Senior labor category requirements, including independent execution of all functional duties and support to mission-critical program elements
DoD 8570 IAT Level II certification or higher (e.g., Security+ CE, CCNA Security)
Deep expertise in Privileged Access Management (PAM) architectures and Zero Standing Privilege concepts
Hands-on experience implementing Just-In-Time (JIT) access workflows
Experience integrating PAM solutions with Active Directory, SIEM platforms (Splunk), and Identity Governance (IGA) tools
Experience producing technical documentation to support RMF and ATO processes (LLDs, SSPs, SOPs)
Ability to lead or oversee the efforts of less senior staff as required by program needs

Job Responsibility

Lead the installation, configuration, and technical implementation of an enterprise Privileged Access Management (PAM) solution (Delinea-focused) across multiple network enclaves
Discover, inventory, and onboard privileged user, administrator, and service accounts into a secure credential vault
Design and enforce policies for Just-In-Time (JIT) access, session monitoring, and session recording to achieve zero standing privileges
Develop scripts and API-based integrations between the PAM solution, Splunk SIEM, and Identity Governance (IGA) platforms
Support RMF accreditation activities by developing Low-Level Design (LLD) documents, System Security Plans (SSPs), and Standard Operating Procedures (SOPs)
Support Authority to Operate (ATO) efforts through security control implementation and technical validation
Lead enterprise rollout of PAM policies from pilot groups to full operational enforcement
Collaborate with Zero Trust architects, identity teams, and cyber engineers to ensure alignment with enterprise security architecture

Senior System Information Assurance and Security Engineer

Barbaricum is seeking a highly skilled System Information Assurance and Security...

Location

United States , Tampa

Salary:

Not provided

Barbaricum

Expiration Date

Until further notice

Requirements

Active DoD TS/SCI Clearance
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field (Master’s preferred)
10+ years of experience in enterprise identity and access management architecture
Demonstrated expertise with Zero Trust frameworks and DoD ICAM standards
Hands-on experience with SAML, OAuth2.0, OpenID Connect, PKI, and certificate management
Experience with DoD enterprise solutions such as Radiant Logic, Okta, Ping Identity, SailPoint, ForgeRock, Microsoft Entra ID (Azure AD), or equivalent
Deep knowledge of Privileged Access Management and Identity Governance & Administration solutions
Strong understanding of DoD cybersecurity compliance frameworks (RMF, NIST SP 800-53, 800-207, 8140/8570)
IAM / DoD Certification IAT Level II (e.g., Security+ CE, SSCP, GSEC)

Job Responsibility

Execute engineering solutions for identity credential and access management for Zero Trust implementation across enterprise systems
Design and maintain an enterprise-wide identity and access management strategy aligned with DoD Zero Trust principles, NIST 800-207, and DoD ICAM Reference Design
Lead integration of federated identity, single sign-on (SSO), and multi-factor authentication (MFA) across cloud and on-prem environments
Develop and maintain policies, standards, and reference architectures to enforce least-privilege and attribute-based access control (ABAC)
Conduct the implementation of Privileged Access Management (PAM) and Identity Governance and Administration (IGA) solutions
Collaborate with cybersecurity, network, and cloud teams to align ICAM solutions with Zero Trust pillars (identity, device, network, application, and data)
Ensure compliance with DoD 8140/8570, RMF, FedRAMP, and other applicable frameworks
Lead proof-of-concepts (POCs) and technology evaluations for emerging identity

System Information Assurance and Security Engineer

Barbaricum is seeking a highly skilled System Information Assurance and Security...

Location

United States , Tampa

Salary:

Not provided

Barbaricum

Expiration Date

Until further notice

Requirements

Active DoD TS/SCI Clearance
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field (Master’s preferred)
5+ years of experience in enterprise identity and access management architecture
Demonstrated expertise with Zero Trust frameworks and DoD ICAM standards
Hands-on experience with SAML, OAuth2.0, OpenID Connect, PKI, and certificate management
Experience with DoD enterprise solutions such as Radiant Logic, Okta, Ping Identity, SailPoint, ForgeRock, Microsoft Entra ID (Azure AD), or equivalent
Deep knowledge of Privileged Access Management and Identity Governance & Administration solutions
Strong understanding of DoD cybersecurity compliance frameworks (RMF, NIST SP 800-53, 800-207, 8140/8570)
IAM / DoD Certification IAT Level II (e.g., Security+ CE, SSCP, GSEC)

Job Responsibility

Execute engineering solutions for identity credential and access management for Zero Trust implementation across enterprise systems
Design and maintain an enterprise-wide identity and access management strategy aligned with DoD Zero Trust principles, NIST 800-207, and DoD ICAM Reference Design
Lead integration of federated identity, single sign-on (SSO), and multi-factor authentication (MFA) across cloud and on-prem environments
Develop and maintain policies, standards, and reference architectures to enforce least-privilege and attribute-based access control (ABAC)
Conduct the implementation of Privileged Access Management (PAM) and Identity Governance and Administration (IGA) solutions
Collaborate with cybersecurity, network, and cloud teams to align ICAM solutions with Zero Trust pillars (identity, device, network, application, and data)
Ensure compliance with DoD 8140/8570, RMF, FedRAMP, and other applicable frameworks
Lead proof-of-concepts (POCs) and technology evaluations for emerging identity

Information Systems Security Engineer

Barbaricum is seeking an Information Systems Security Engineer (ISSE) providing ...

Location

United States , Warren, MI

Salary:

Not provided

Barbaricum

Expiration Date

Until further notice

Requirements

Recommend security designs and develop architectures for combat ground platforms
Integrate cybersecurity tasks within systems engineering processes during system acquisition
Provide expertise in Cybersecurity and Information Assurance for combat vehicles
Implement Cross Domain Solution (CDS) designs as part of national cybersecurity initiatives
Conduct cyber threat assessments and recommend solutions for identified deficiencies
Support cybersecurity testing and certification, ensuring system compliance
Facilitate certification processes with Army and national cybersecurity offices
Translate security controls into system requirements and verify threat mitigations
Participate in technical meetings and provide cybersecurity input on C5ISR integration
Prepare and present cybersecurity-related materials and reports

Job Responsibility

Recommend security designs and develop architectures for combat ground platforms
Integrate cybersecurity tasks within systems engineering processes during system acquisition
Provide expertise in Cybersecurity and Information Assurance for combat vehicles
Implement Cross Domain Solution (CDS) designs as part of national cybersecurity initiatives
Conduct cyber threat assessments and recommend solutions for identified deficiencies
Support cybersecurity testing and certification, ensuring system compliance
Facilitate certification processes with Army and national cybersecurity offices
Translate security controls into system requirements and verify threat mitigations
Participate in technical meetings and provide cybersecurity input on C5ISR integration
Prepare and present cybersecurity-related materials and reports

Information Systems Security Engineer

The Information Systems Security Engineer provides support to the customer in th...

Location

United States , Westfields

Salary:

Not provided

Arcfield

Expiration Date

Until further notice

Requirements

Must possess and be able to maintain a TS/SCI with Poly
A Bachelors of Science degree with 10-12 years of relevant experience, a Master's degree with 8-10 years of relevant experience, or a PhD with 5-7 years of relevant experience
Able to support customer’s core hours (0900-1500
Mon – Fri)
A Cyber Certification (DoD 8570/8140)
Excellent communications skills – Verbal and Non-Verbal
Demonstrated expertise and experience in networking protocols and concepts
Demonstrated knowledge and experience in software defined networking principles and technologies
Demonstrated experience providing security engineering support
Demonstrated knowledge and experience in the NIST RMF

Job Responsibility

Collaborate with stakeholders to ensure their assets are compliant with the Risk Management Framework
Collaborate with government customer to provide status of cognizant assets, make recommendations when warranted and provide feedback to stakeholders
Provide analytical and technical security recommendations to the customer
Identify projects’ security requirements
Participate in network design reviews and security testing for the customer’s networks
Coordinate with system development teams to ensure network security standards are being followed and implemented correctly
Identify additional security requirements, based on RMF or as the result of security issues that put the customer’s systems at risk
Review and analyze new systems (hardware and software) and provides recommendations concerning their security
Provide A&A and RMF guidance to system owners to ensure accreditation success
Provide insight and recommendations leading up to and during the customer's information assurance readiness review process

Fulltime

Senior Information Security Engineer

Serve as a technical leader in our Security team reporting to our Information Se...

Location

United States , Boston

Salary:

150000.00 - 190000.00 USD / Year

Whoop

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related technical field and/or advanced certifications (CISSP, CISM, AWS Security Specialty, SANS, etc.)
8+ years of hands-on experience in Information Security, IT Security, or a related role, including at least 2 years in a senior or lead capacity
Proven track record implementing and managing advanced security technologies (e.g., CASB, CNAPP, CSPM, SIEM, SOAR, DLP, SWG)
Experience securing AI/ML systems or APIs, including governance of third-party AI integrations and organizational use of AI tools
Strong understanding of modern cloud security architecture (AWS, Azure, GCP) and experience performing threat modeling and risk assessments on cloud-based systems
Hands-on experience with application security tooling (SAST, SCA, DAST) and embedding secure development practices
Demonstrated leadership in security incident response, investigations, and root cause analysis
Effective communicator with the ability to influence stakeholders and explain security concepts to technical and non-technical audiences
Strong project management skills and the ability to drive initiatives to completion in a fast-paced environment
Experience mentoring engineers and setting operational standards

Job Responsibility

Implement and enhance security controls by leading the deployment, integration, and tuning of solutions such as CNAPP, SIEM, CASB, EDR, DLP, and MDM to maximize effectiveness
Support security design decisions by providing subject matter expertise on cloud and SaaS security best practices while influencing architecture led by the Security Architect role
Lead incident response and investigations by guiding containment, remediation, root cause analysis, and post-incident improvements
Strengthen application security by overseeing secure development practices and managing SAST, SCA, and DAST tooling
Advance identity and access management by supporting IAM policy enforcement, SSO, MFA, SCIM, RBAC, and user lifecycle governance
Secure AI systems and integrations by assessing and protecting embedded APIs and organizational AI tool usage to ensure resilience, privacy, and compliance
Collaborate cross-functionally by working with Engineering, IT, and GRC teams to embed security into systems and workflows
Mentor and influence by providing technical guidance, reviewing work, and promoting security-first thinking across the organization
Stay ahead of threats and regulations by tracking emerging risks, technologies, and compliance requirements to inform forward-looking strategies
Participate in and help improve the on-call rotation by providing guidance, escalation support, and driving improvements in response processes

What we offer

competitive base salaries
meaningful equity
generous equity package

Fulltime

Information Systems Security Engineer

STR has an exciting opportunity for a well-rounded cybersecurity professional to...

Location

United States , Woburn

Salary:

136000.00 - 170000.00 USD / Year

STR

Expiration Date

Until further notice

Requirements

Active Top Secret security clearance with the ability to obtain SAP and SCI access (U.S. citizenship required)
3-5 years of technical (hands-on) experience in Information Assurance/Cyber Engineering, including requirements development and implementation
DoD 8570 IAM Level III certification (CISA, CISM, CISSP, etc.) or the ability to obtain within 6 months of hire
Knowledge of the DCSA Authorization and Assessment Process Manual (DAAPM) and the Joint Special Access Implementation Guide (JSIG)
Configuration, certification, and auditing/analysis of Windows/Linux operating systems and system virtualization in peer-to-peer, LAN & WAN networks
Managing and implementing DISA STIGs and benchmarks in various operating systems (Windows, RHEL, Ubuntu)
Using IA vulnerability/compliance scanning tools (e.g., NMap, ACAS, Nessus, Security Content Automation Protocol (SCAP))
Maintaining/managing Security Incident and Event Management (SIEM) and centralized auditing tools (e.g., Splunk, PowerStrux)
Familiarity with Microsoft Deployment Toolkit (MDT)
Supporting the hardening of new builds of Information Systems (IS) and ensuring full functionality before deployment

Job Responsibility

Conduct both vulnerability and compliance scans of Information Systems
Support the development of Risk Management Framework (RMF) documentation and control validation testing for Authority to Operate (ATO) accreditations
Develop cybersecurity requirements, design, and architecture for current and emerging program needs
Implement Information Assurance and Information Security protections and requirements in program development and execution environments
Apply required security controls to networking devices, databases, operating systems, and hardware/software components
Assist ISSMs and ISSOs in monitoring and resolving Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities
Conduct reviews and technical inspections to identify and mitigate potential security weaknesses, ensuring all security features are implemented and functional
Support the completion of Continuous Monitoring requirements in accordance with RMF and NIST SP800-53 standards
Perform other tasks as assigned by the manager

Fulltime

Information System Security Engineer

LufCo

Location:
United States , Annapolis Junction

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
December 10, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Information System Security Engineer

System Security Engineer

Senior System Security and Information Assurance Engineer

Senior System Information Assurance and Security Engineer

System Information Assurance and Security Engineer

Information Systems Security Engineer

Information Systems Security Engineer

Senior Information Security Engineer

Information Systems Security Engineer

Information System Security Engineer

LufCo

Location:United States , Annapolis Junction

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:December 10, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Information System Security Engineer

System Security Engineer

Senior System Security and Information Assurance Engineer

Senior System Information Assurance and Security Engineer

System Information Assurance and Security Engineer

Information Systems Security Engineer

Information Systems Security Engineer

Senior Information Security Engineer

Information Systems Security Engineer

Location:
United States , Annapolis Junction

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
December 10, 2025