The Role
Designs and implements cybersecurity controls for mission-critical information systems under RMF, NIST, and DoW requirements. Performs configuration, vulnerability, and risk assessments; deploys security tools; supports A&A packages; manages vulnerabilities and incident remediation; and conducts security impact analyses. Provides technical leadership for cybersecurity integration across system lifecycles while maintaining compliance during emergency and depot-level maintenance. Produces security reports, threat analyses, and risk summaries, collaborating with engineering and program stakeholders.
Summary Generated by Built In
Overview
AMERICAN SYSTEMS is seeking our next Information Systems Security Enigneer II (ISSE)
As an Information Systems Security Engineer II (ISSE) on the NISSC 3 program, you will analyze, design, and implement technical security controls to protect mission-critical information systems and ensure continuous compliance with RMF, NIST, and DoW cybersecurity requirements.You will perform configuration, vulnerability, and risk assessments; deploy and validate security tools; support Assessment & Authorization (A&A) activities; and provide technical leadership for cybersecurity integration across complex systems. You will work closely with systems engineering, configuration management, and the EDLM/UDLM (Emergency/Urgent Depot Level Maintenance) Manager to maintain cyber readiness and support incident response.
Responsibilities- Ensure automated information system (AIS) and network nodes are operated, maintained, and
- Analyze, design, and implement technical security controls for complex information systems in accordance with RMF, NIST, and DoW requirements.
- Perform configuration assessments, vulnerability assessments, and risk assessments for systems, applications, and supporting infrastructure.
- Configure, deploy, and validate security tools and technologies to monitor, detect, and protect against cyber threats.
- Support the development, documentation, and maintenance of assessment and authorization (A&A) packages, including system security plans (SSPs), plans of action and milestones (POA&Ms), and supporting artifacts.
- Conduct security impact analyses for system changes and recommend appropriate security engineering solutions.
- Participate in incident tracking and remediation activities; support root-cause analysis and corrective actions to prevent recurrence.
- Provide technical leadership and guidance on systems security engineering best practices to project teams and stakeholders.
- Oversee cybersecurity integration across systems, ensuring security controls are effectively implemented during design, development, test, deployment, and sustainment.
- Support vulnerability management activities, including scanning, analysis, remediation planning, and status reporting.
- Develop and submit security reports, threat analyses, and risk summaries to support program decision-making and senior leadership updates.
- Collaborate closely with the EDLM/UDLM Manager to ensure that emergency and urgent depot-level maintenance actions comply with cybersecurity requirements and do not introduce unacceptable risk.
- Contribute to continuous improvement of cybersecurity processes, procedures, and tooling in alignment with evolving DoW and NIST guidance.
- 4–6 years of relevant, hands-on experience in systems security engineering, cybersecurity engineering, information assurance, or related discipline, ideally within a DoW or similarly regulated environment.
- Advanced knowledge of systems security engineering principles and practices, with demonstrated experience designing and implementing technical security controls.
- Hands-on experience conducting configuration assessments, vulnerability assessments, and risk assessments for DoW or similar high-assurance systems.
- Proven ability to configure, manage, and validate security tools and technologies in support of RMF, NIST, and DoW compliance.
- Experience supporting the development and maintenance of RMF A&A packages, including security documentation, control implementation statements, and evidence collection.
- Demonstrated capabilities in incident tracking, triage, remediation support, and collaboration with incident response teams.
- Proficiency in developing advanced security solutions and overseeing cybersecurity integration across complex systems and environments.
- Experience with one or more of the following tools (or similar):
- eMASS, XACTA, CORE
- ACAS
- SCAP tools
- Nessus
- Checkmarx
- ZAP DAST
- Ability to interpret and apply DoW, NIST, and RMF policy, standards, and guidance in an operational environment.
- Strong written and verbal communication skills, including experience producing technical documentation, security reports, and risk/threat analyses.
- Must hold at least one qualifying DoW 8140 certification (e.g., CCSP, Cloud+, CSC, GCLD, GSEC, SecurityX/CASP+).
- Active DoW Secret clearance with eligibility to obtain TS/SCI.
- Bachelor’s degree in one of the following (or closely related) fields:
- Information Technology (IT)
- Cybersecurity
- Computer Science (CS)
- Information Systems (IS)
- Data Science
- Software Engineering
- OR Equivalent DoW/Military training in cybersecurity, information assurance, or systems security engineering.
Skills Required
- 4-6 years of relevant hands-on experience in systems security engineering, cybersecurity engineering, information assurance, or a related discipline
- Advanced knowledge of systems security engineering principles and technical security control implementation
- Experience conducting configuration, vulnerability, and risk assessments for DoW or similar high-assurance systems
- Experience configuring, managing, and validating security tools for RMF, NIST, and DoW compliance
- Experience developing and maintaining RMF assessment and authorization packages, including security documentation, control implementation statements, and evidence collection
- Experience with incident tracking, triage, remediation support, and incident response collaboration
- Ability to develop security solutions and oversee cybersecurity integration across complex systems and environments
- Experience with one or more of eMASS, XACTA, CORE, ACAS, SCAP tools, Nessus, Checkmarx, or ZAP DAST
- Ability to interpret and apply DoW, NIST, and RMF policies, standards, and guidance
- Strong written and verbal communication skills, including technical documentation, security reports, and risk or threat analyses
- At least one qualifying DoW 8140 certification, such as CCSP, Cloud+, CSC, GCLD, GSEC, or SecurityX/CASP+
- Active DoW Secret clearance with eligibility to obtain TS/SCI
- Bachelor's degree in IT, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or a closely related field
- Equivalent DoW or military training in cybersecurity, information assurance, or systems security engineering may substitute for the bachelor's degree
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
AMERICAN SYSTEMS is an employee-owned government services contractor that delivers professional, technical, information technology, engineering, analysis, testing, evaluation, and training solutions for complex national-priority programs. Based in McLean, Virginia, the company supports federal customers—particularly defense and other Department of Defense missions—with mission-essential and information engineering, digital engineering, systems integration, cybersecurity, cloud, data, and lifecycle IT services across critical public-sector environments.
.png)
