This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Opportunity: Are you looking for an opportunity to apply your expertise in cybersecurity, risk management, and secure system design to strengthen national defense and protect mission-critical AI-enabled capabilities? As an Information Systems Security Engineer (ISSE), you will identify the security controls, assessment tools, and authorization strategies needed to ensure emerging technologies are securely integrated into operational, research, and enterprise environments. Your experience will help drive the development, testing, and deployment of secure systems that safeguard missions, protect sensitive data, and reinforce our nation's security posture.
Job Responsibility
Identify the security controls, assessment tools, and authorization strategies needed to ensure emerging technologies are securely integrated into operational, research, and enterprise environments
Guide and mentor professionals as they analyze complex cybersecurity challenges, conduct security assessments, and remediate vulnerabilities across varied systems and architectures
Lead the creation and maintenance of RMF authorization packages, manage ATO processes, and oversee the development of key cybersecurity artifacts, from system security plans to POA&Ms
Evaluate system risks, ensure compliance with STIGs and IAVM directives, and coordinate vulnerability remediation efforts across project teams
Embed cybersecurity best practices into AI development pipelines and integrate security throughout the system lifecycle
Requirements
Experience with the Risk Management Framework (RMF), including creation and maintenance of authorization packages, ATOs, and re-authorizations
Experience conducting security assessments, vulnerability remediation, and continuous monitoring in alignment with RMF
Experience with compliance scanning and VM tools, especially ACAS and SCAP
Experience implementing cybersecurity directives such as IAVM directives, CPUs, and STIGs
Experience updating and maintaining eMASS, including scan results, documentation, and evidence packages
Knowledge of system lifecycle management and procurement cybersecurity requirements
Ability to prepare and maintain cybersecurity documentation, including SSPs, SARs, and POA&Ms
Ability to analyze system architectures, hardware, and software designs to identify and mitigate security risks
TS/SCI clearance with a polygraph
HS diploma or GED
Nice to have
Experience securing AI-enabled or ML-driven systems
Experience with cloud and hybrid architectures, especially when securing AI workloads across varied computer environments
Experience with DevSecOps tooling, CI/CD security integration, and automated compliance workflows
Experience working with cross-functional AI/ML development teams, enabling secure model training, deployment pipelines, and monitoring frameworks
Experience in secure software development or secure architecture design reviews
Experience with cybersecurity automation scripting such as Python, PowerShell, or Ansible to support STIG automation, scanning pipelines, or IaC security controls
Knowledge of DoD-specific cybersecurity governance frameworks, mission workflows, and operational environments including USCYBERCOM or DoW environments
Bachelor's degree
What we offer
Health, life, disability, financial, and retirement benefits