C

Cambridge International Systems Inc

Designs and delivers cyber-physical security solutions

Information Systems Security Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeCharleston, SC, USA$103k - $121k /yrIn-person

About the Job

Requirements

  • A bachelor's degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a Computer Science concentration, or a related discipline, from an ABET-accredited degree program is required.
  • At least three years of experience developing, implementing, and maintaining cybersecurity policies, including Assessment and Authorization activities, is required.
  • A Department of Defense 8570/8140 Level I certification in IAM, IAT, or IASAE is required.
  • A current active Top Secret security clearance is required.
  • Employment is contingent upon a successful background investigation.
  • Alcohol and drug screening may be required for federal contract compliance.
  • The role requires prolonged sitting and/or standing, including desk-based computer work.
  • The role requires work at government or other secure facilities where personal electronic devices may be restricted.
  • The role requires communicating with team members, customers, and stakeholders in writing and verbally.
  • The role requires managing competing priorities and deadlines while maintaining attention to detail.

Responsibilities

  • Integrate cybersecurity requirements into system architectures, engineering designs, interface specifications, and technical documentation.
  • Engineer, implement, and validate security controls in accordance with NIST RMF, NIST SP 800-53, CNSSI 1253, and Department of Defense guidance.
  • Conduct architecture reviews, vulnerability assessments, threat analysis, risk assessments, attack surface analysis, and mitigation planning.
  • Participate in design reviews, technical interchange meetings, and configuration control boards to embed security from the outset.
  • Develop and maintain SSPs, control implementation statements, security and network diagrams, interface documents, and engineering analyses.
  • Support RMF artifacts, including SAPs, SARs, POA&Ms, and continuous monitoring documentation.
  • Identify security gaps and architectural risks and recommend practical engineering mitigations.
  • Collaborate with engineering teams to establish and maintain secure configuration baselines.
  • Evaluate system changes, technology insertions, and architecture modifications for cybersecurity and authorization impacts.
  • Analyze vulnerability scan results, prioritize findings, plan remediation, and validate corrective actions.
  • Support integration, testing, verification, validation, accreditation, and continuous monitoring activities.
  • Ensure secure integration of commercial off-the-shelf, government off-the-shelf, open-source, cloud-based, and custom-developed technologies.
  • Provide guidance on secure design, defense-in-depth, Zero Trust, and cybersecurity best practices.
  • Prepare technical reports, engineering recommendations, risk assessments, and executive briefings.

Desired Qualifications

  • Experience supporting Department of Defense, Intelligence Community, or classified government systems.
  • Demonstrated experience engineering NIST RMF controls and preparing RMF artifacts.
  • Experience with secure systems engineering, defense-in-depth, Zero Trust architecture, and large-scale distributed systems.
  • Experience with operating systems, networks, virtualization, cloud, identity and access management, encryption, and cybersecurity tools.
  • Vulnerability assessment experience with ACAS, Nessus, SCAP, or similar tools.
  • Experience with cloud security, hybrid environments, containers, Kubernetes, and DevSecOps pipelines.
  • Experience with Infrastructure as Code and scripting using PowerShell, Python, Ansible, or Terraform; familiarity with the Department of Defense Enterprise DevSecOps Reference Design or Platform One.
  • Active security certifications such as Security+, CISSP, CASP+, CCSP, GIAC, or IASAE.
  • Technical writing and verbal communication skills for technical and leadership audiences.
  • Experience with large-scale defense, intelligence, or space system environments, including ground infrastructure, mission operations, networks, cloud, or enterprise IT.

About the Company

Cambridge International Systems Inc

Designs and delivers cyber-physical security solutions

Cambridge International Systems designs and delivers capacity-building and security solutions across cyber and physical domains, working in sectors such as critical infrastructure, border security, aviation, threat finance, banking, and health security. It uses holistic discovery to understand complex environments and then deploys integrated, multi-domain solutions that address people, processes, and technology, with advisory, implementation, and ongoing support. With nearly 30 years of experience in high-stakes environments, it focuses on end-to-end capacity-building and holistic problem-solving rather than isolated tools, serving clients globally. Its goal is to reduce risk from sophisticated threats and strengthen security and resilience to enable successful operations.

Company size
201-500
Company stage
Not listed
Total funding
Not listed
Headquarters
Arlington, WV
Founded
1994

Recently Posted Jobs

Explore more opportunities at Cambridge International Systems Inc

See more jobs