Information System Security Engineer

Job Description

CSCI Consulting is looking for a skilled Information System Security Engineer (ISSE) to support the Joint Transportation Management System (JTMS), a critical Department of War modernization initiative. This role provides the opportunity to apply hands-on cybersecurity engineering expertise across complex on-premises and cloud environments while supporting mission-critical transportation and logistics operations.

As part of a collaborative cybersecurity team, you will work alongside architects, ISSOs, system administrators, and government stakeholders to implement security controls, strengthen system security posture, and support compliance with Department of Defense cybersecurity requirements.

Responsibilities

• Implement and document Security Technical Implementation Guide (STIG) configurations across assigned systems and platforms
• Conduct Security Impact Analyses (SIAs) for system modifications, upgrades, and enhancements
• Execute automated compliance validation and configuration assessments using SCAP Compliance Checker
• Manage vulnerability identification, tracking, remediation, and reporting activities using Tenable Security Center or similar tools
• Assess cloud infrastructure security posture utilizing Tenable Cloud Security or comparable cloud security assessment platforms
• Support CyberArk Privileged Access Management (PAM) implementation and administration activities
• Develop and maintain secure configuration baselines and system hardening standards
• Author technical security implementation guides and supporting cybersecurity documentation
• Collaborate with engineering and cybersecurity teams to implement and validate security controls
• Support cybersecurity architecture initiatives and technical security implementations across JTMS environments

Minimum Requirements

• Active Secret Security Clearance
• 3–5 years of experience in cybersecurity engineering, system hardening, vulnerability management, or information assurance
• Hands-on experience with STIG Viewer and SCAP Compliance Checker
• Experience using Tenable Security Center (SC) or equivalent vulnerability management solutions
• Strong knowledge of secure configuration management principles and cybersecurity best practices
• Ability to communicate effectively with technical and non-technical stakeholders
• Strong analytical, troubleshooting, and technical documentation skills
• DoD 8140.03M DCWF Basic Tier Certification; CEH required
• Creativity and adaptability in problem-solving
• Ability to work with clients to understand their needs
• Strong organizational and time-management skills
• Excellent written and verbal communication skills
• Professional presence

Preferred Skills

• Experience administering or supporting CyberArk Privileged Access Management (PAM) solutions
• Familiarity with Tenable Cloud Security or similar cloud security assessment tools
• Experience supporting DoD cloud environments (Impact Levels 2–6)
• Experience implementing cybersecurity controls within RMF-authorized environments
• Knowledge of NIST SP 800-53, DISA STIGs, and DoD cybersecurity requirements
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Systems, Software Engineering, Data Science, or a related technical field
• One or more DoD 8140.03M DCWF Intermediate certifications, including CEH Practical (CEH-P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+
• Ability to work in a team environment, as well as independently
• Strong customer and vendor relationship skills
• Demonstrated ability to comply with data standards and policies
• Motivation to learn new technologies and methodologies that demonstrate value
• Past experience working with a Federal agency
• Department of War experience is a plus!