Information Systems Security Engineer

Overview

Job Summary

 

Galapagos Federal Systems LLC is looking for an enthusiastic, well-qualified individual to fill the Information Systems Security Engineer position. This role offers the opportunity to work with a diverse and talented group of individuals committed to driving success.

 

The ideal candidates will provide cybersecurity engineering expertise across engineering and operations network solutions. The ISSE ensures strategic and technical adherence to all aspects of the Information Assurance (IA) program in accordance with U.S. Government and Intelligence Community requirements, including ICD 503, RMF, and applicable NIST and CNSSI guidance.

 

The ISSE is responsible for integrating security controls into system architectures, supporting Assessment and Authorization (A&A) activities, and collaborating with multidisciplinary security and program teams to ensure systems meet required security, compliance, and operational standards throughout the system lifecycle.

 

Key Responsibilities

 

The Information Systems Security Engineer will:

• Provide cybersecurity engineering support for engineering and operational network solutions
• Ensure compliance with Information Assurance (IA) and cybersecurity requirements mandated by ICD 503, DoD Instruction 8510.01 (RMF for DoD Systems), Applicable NIST and CNSSI publications
• Support and prepare Assessment and Authorization (A&A) documentation, artifacts, and procedures
• Engineer and implement security controls in alignment with NIST SP 800-53
• Participate in system categorization, control selection, implementation, assessment, and continuous monitoring
• Interface with IA team members, ISSOs and ISSMs, Other security disciplines (industrial, physical, special programs security), Program personnel and government security representatives
• Support certification and accreditation activities under ICD 503
• Ensure cybersecurity considerations are integrated into system design, deployment, and operations
• Maintain required cybersecurity and technical training to support assigned systems
• Provide technical guidance and recommendations to program leadership on security risks and mitigation strategies
• Experience supporting Intelligence Community systems
• Familiarity with multi-domain security environments
• Ability to operate effectively in high-compliance, mission-critical environments
• Strong attention to detail and risk-based decision making

Requirements

Skills and Experience

 

The Information Systems Security Engineer must have:

• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance
• 5+ years of experience in information assurance, cybersecurity engineering, or Assessment & Authorization (A&A) supporting DoD or Intelligence Community (IC) systems.
• Demonstrated experience in information assurance and cybersecurity engineering within Department of Defense (DoD) or Intelligence Community (IC) environments
• Proven experience supporting Intelligence Community Directive (ICD) 503 Certification and Accreditation (C&A) activities
• Strong working knowledge of the Risk Management Framework (RMF) and applicable cybersecurity standards and guidance, including NIST SP 800-53 (Security and Privacy Controls), NIST SP 800-37 (Risk Management Framework), NIST SP 800-39 (Managing Information Security Risk), NIST SP 800-30 (Risk Assessment Guide), and CNSSI 1253 (Security Categorization and Control Selection)
• Experience developing, reviewing, and maintaining Assessment and Authorization (A&A) documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms)
• Familiarity with engineering and operational environments supporting classified information systems

Education and Certifications

 

The Information Systems Security Engineer must meet the following:

 

Required

• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, Engineering, or a related technical discipline
• Equivalent experience may be substituted in lieu of a degree
• Must meet DoD 8140 education and certification requirements
• Must maintain required technical and cybersecurity training as defined by role and system assignment

Preferred

• CompTIA Security+ CE
• CISSP
• CAP (Certified Authorization Professional)
• CASP+
• CISM

Benefits

 

• Medical, dental, vision, disability, and life insura