Role OverviewSMX is seeking a highly experienced Information Systems Security Engineer (ISSE) – Sr to support a mission-critical federal program in Washington, DC. This individual will serve as a senior cybersecurity and security engineering professional responsible for designing, implementing, assessing, and maintaining security controls that protect enterprise systems, applications, and infrastructure supporting critical mission operations.
What You Will Do
Lead security engineering activities, design and implement security controls, develop and maintain security documentation, conduct security testing and vulnerability assessments, and support Authorization to Operate (ATO) activities.
Why It Might Be a Fit
The ideal candidate will possess strong technical leadership capabilities, the ability to evaluate security risks, develop mitigation strategies, and guide engineering teams in implementing effective security solutions.
Requirements
- Active TS/SCI clearance
- Minimum of 8 years of professional experience supporting cybersecurity, security engineering, information assurance, or related disciplines
- Demonstrated experience serving as a senior security engineer, lead cybersecurity practitioner, or technical security subject matter expert
- Extensive experience implementing and assessing security controls in accordance with NIST and federal cybersecurity requirements
- Experience supporting Risk Management Framework (RMF) activities and Authorization to Operate (ATO) processes
- Experience developing and maintaining SSPs, POA&Ms, Security Assessment Plans, authorization boundary diagrams, and related security artifacts
- Experience conducting vulnerability assessments, security testing, control validation, and risk assessment activities
- Experience evaluating system architectures, security configurations, and technical implementations for compliance and security effectiveness
- Strong understanding of NIST 800-53, NIST 800-37, continuous monitoring, and federal cybersecurity standards
- Experience supporting enterprise security programs within complex technology environments
- Experience analyzing security findings and developing risk-based mitigation strategies
- Strong analytical, troubleshooting, and problem-solving skills
- Ability to communicate complex security concepts to technical and non-technical audiences
- Strong written and verbal communication skills
- Ability to work independently while managing multiple priorities and technical initiatives
Benefits
- health insurance
- paid leave
- retirement
]]>