Information Systems Security Engineer

Company Overview

For over 25 years, Edgesource Corporation has served as an innovative technology service provider for the Department of War (DOW), Department of Homeland Security (DHS), Department of State (DOS), the U.S. Intelligence Community, Law Enforcement, and other federal, state, and commercial clients locally, nationally, and abroad. From providing boutique technical solutions in support of the DOD Counter Unmanned Aerial Systems (CUAS) mission set to addressing the most critical Cybersecurity threats facing our nation as a prime contractor with the DHS Cybersecurity & Infrastructure Security Agency (CISA), a career at Edgesource is an opportunity to do meaningful, interesting, and impactful work.

Position Overview

Client is seeking an Information Systems Security Engineer to provide cybersecurity engineering and Assessment and Authorization support for the Sponsor's portfolio. The ISSE will integrate cybersecurity requirements into system architecture, design, development, testing, deployment, and operations; maintain security authorization artifacts; support continuous monitoring; and help ensure all systems retain required security designations and approvals throughout their lifecycle.

Job Duties

• Security Engineering & Assessment and Authorization

  • Define, document, and maintain cybersecurity and information assurance requirements for Sponsor systems and applications.

  • Support Assessment and Authorization activities throughout the system lifecycle in accordance with Sponsor policy and the applicable Risk Management Framework.

  • Develop and maintain system security plans, control implementation statements, architecture diagrams, risk assessments, assessment evidence, and authorization artifacts.

  • Partner with architects, engineers, developers, administrators, testers, and system owners to integrate security into system design and implementation.

  • Assess proposed system, software, infrastructure, network, data, and configuration changes for cybersecurity impact.

  Continuous Monitoring & Risk Management

  • Coordinate vulnerability scanning, secure configuration assessment, remediation tracking, and validation of corrective actions.

  • Support continuous monitoring, recurring security control assessments, audit preparation, and ongoing authorization activities.

  • Track security findings, risks, mitigations, exceptions, and Plans of Action and Milestones through closure.

  • Review access controls, authentication, authorization, encryption, logging, auditing, interfaces, data flows, and boundary protections for compliance and risk.

  • Provide cybersecurity guidance during incident response, deployments, system transitions, and operational changes.

  Documentation & Communication

  • Maintain accurate security documentation, evidence repositories, assessment records, control mappings, and authorization status.

  • Communicate cybersecurity risks, requirements, findings, and remediation priorities to technical and non-technical stakeholders.

  • Participate in design reviews, technical exchanges, change-control activities, and security working groups.

Required Qualifications

• Active TS/SCI with Poly.

• Professional experience performing information systems security engineering, security authorization, or information assurance work for complex systems.

• Knowledge of security control implementation, risk assessment, vulnerability management, secure configuration, and continuous monitoring.

• Experience producing and maintaining cybersecurity documentation, control evidence, risk records, and authorization packages.

• Ability to collaborate with technical teams and translate security requirements into implementable engineering actions.

• Strong technical writing, organization, analysis, and stakeholder communication skills.

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent relevant experience.

Nice to Have Qualifications

• Experience supporting Intelligence Community, Department of Defense, or other federal Assessment and Authorization processes.

• Relevant cybersecurity certification such as Security+, CISSP, CGRC, CASP+/SecurityX, or equivalent.

• Experience securing cloud, hybrid, containerized, data-intensive, or DevSecOps environments.

Working at Edgesource

As an ISO 9001:2015 certified and CMMI Level 3 appraised small business, Edgesource specializes in providing a variety of technical solutions to include software development, database services, enterprise networking, data center virtualization, and management support. We are always seeking top-talent to join our team in helping to address the most critical technical challenges facing our nation.

At Edgesource, we understand that our employees are our greatest asset, and as such we offer a wide array of benefits to support the well-being of our staff to include:

• Flexible PTO Policy + 11 Paid Holidays

• Flexible Work Schedules (Remote / Hybrid)

• Medical / Dental / Vision / Flexible Spending Account (FSA)

• 401k Plan with Match

• Tuition & Professional Development Support

• Commuter Benefits

• Bonus & Employee Referral Programs

• Career Growth Opportunities

Disclaimer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Edgesource is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, please contact our Recruiting Department by email at [email protected] or by phone at (703) 837-0550