Information Systems Security Engineer

M9 Solutions is seeking an ISSE to work on-site in support of a government contract for a client located in Bellevue, NE. An active Top Secret clearance is required.

Responsibilities

• Translates mission objectives, operational needs, threats, and policy requirements into measurable system security requirements and engineering specifications.
• Participates in systems engineering technical reviews, including system requirements reviews, preliminary design reviews, solution design document reviews, test readiness reviews, and operational readiness reviews.
• Integrates cybersecurity requirements throughout the system life cycle, including concept development, requirement analysis, architecture design, integration, verification, validation, deployment, sustainment, and disposal.
• Evaluates system designs for security, resilience, reliability, maintainability, interoperability, scalability, and operational supportability.
• Develops or reviews system architecture products, including operational views, logical and physical architecture diagrams, data-flow diagrams, trust-boundary, network diagrams, interface control documents, and deployment diagrams.
• Develops and maintains cybersecurity artifacts, including system security plans, security control implementation statements, architecture diagrams, risk assessments, remediation plans, contingency plans, and security test documentation.
• Defines security architecture patterns for identity and access management, privileged access, encryption, key management, network segmentation, endpoint protection, logging, monitoring, backup, recovery, and remote access.
• Designs or recommends technical safeguards that protect data in transit, at rest, and in use, consistent with mission and system requirements.
• Conducts or supports threat modeling, attack-surface analysis, misuse-case development, and engineering risk assessments.

Required Skills and Qualifications

• Top Secret security clearance.
• Bachelor's degree or equivalent experience. 
• 5+ years of cybersecurity engineering, information assurance, or security architecture experience.
• ITIL Foundations v4 Certificate or the ability to obtain within 9 months.
• Certifications such as CISSP, GIAC, CEH, or equivalent advanced cybersecurity credentials.
• Strong technical background in system security, network security, cryptography, secure architectures, firewalls, and DevSecOps environments.
• Proficiency in programming languages such as Java, C++, and Python, with hands-on experience in secure coding and automation.
• Familiarity with cloud security (AWS, Azure, GCP), virtualization, identity management, and security compliance frameworks.
• Industry certifications such as CISSP-ISSEP, ASEP, GIAC, GCIH, CEH, or other advanced cybersecurity credentials.
• Demonstrated strength in problem solving, communication, documentation, and attention to detail.
• Experience designing secure architectures for enterprise systems, applications, and cloud platforms.

Preferred Skills and Qualifications

• Knowledge of systems engineering life-cycle processes, including requirements decomposition, functional analysis, design synthesis, integration, verification, validation, and configuration management.
• Experience with systems engineering and systems security engineering practices.
• Ability to develop and analyze system, subsystem, interface, and security requirements.
• Knowledge of security architecture principles, including defense in depth, Zero Trust architecture, identity, credential, and access management (ICAM), network segmentation and boundary protection, key management, secure configuration and system hardening.
• Experience with model-based systems engineering tools or methods, such as SysML, UML, architecture modeling, or digital engineering environments.
• Experience with enterprise architecture frameworks or federal architecture approaches.
• Experience with risk management and security engineering standards, such as NIST risk management and security-control frameworks.
• Experience with cyber forensics, intrusion detection, threat analysis, and incident response.
• Strong background in system/network security, encryption algorithms, cryptography, identity management, and secure architectures.
• Proficiency with tools such as Splunk, Nessus, Wireshark, Nmap, AWS/Azure/GCP security suites, and vulnerability management platforms.
• Knowledge of secure programming in Java, C++, Python, and automation for security workflows.
• Ability to communicate complex technical architecture and cybersecurity issues to engineers, program managers, system owners, and senior leaders.
• Ability to develop clear technical documentation, diagrams, briefings, decision papers, and engineering recommendations.
• Ability to work effectively across engineering, cybersecurity, operations, acquisition, testing, and sustainment organizations.
• Ability to manage competing priorities while maintaining technical rigor, traceability, and configuration discipline.
• Familiarity with DevSecOps practices, virtualized environments, cloud security frameworks, and infrastructure-as-code (Terraform).
• Certifications such as CISSP, CISSP-ISSEP, CISSP-ISSAP, INCOSE ASEP, GIAC, CEH, or equivalent advanced cybersecurity credentials.
• Strong communication, documentation, analytical skills, and attention to detail.

GH 1093

Salary Range 90000 - 105000 USD