AnaVation

Federal IT engineering services and cybersecurity

Information Systems Security Engineer

Security Engineering & ArchitecturePosted on Nov 12

Full-timeSan Antonio, TX, USA

About the Job

Requirements

Must be a U.S. citizen and have held a TS/SCI clearance within the last two years and a CI polygraph within the last five years.
Must have a bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related field.
Must hold one or more of CISSP, CCSP, AWS Security Specialty, or an equivalent DoD 8140 certification.
Must have nine or more years supporting Department of Defense or Intelligence Community cybersecurity missions.
Must have nine or more years of cybersecurity engineering, information assurance, Risk Management Framework (RMF), DevSecOps, or cloud security experience.
Must have experience implementing cybersecurity controls within cloud-native or containerized environments.
Must have experience supporting RMF implementation and security engineering activities.
Must have working knowledge of NIST SP 800-53, RMF, Security Technical Implementation Guide (STIG) implementation, vulnerability management, and continuous monitoring.
Must have experience integrating cybersecurity into Agile software development environments.
Must have experience supporting Kubernetes, OpenShift, containers, or cloud platforms.
Must be able to administer, configure, integrate, and troubleshoot Elastic, Elasticsearch, or Kibana security information and event management tools; ACAS or Tenable/Nessus vulnerability-scanning tools; AWS Security Hub or Prowler cloud-security tools; Twistlock or Prisma Cloud Compute container-security tools; RegScale governance, risk, and compliance automation tools; and Jira, Confluence, or Mattermost collaboration and work-management tools.
Must have excellent written and verbal communication skills and be able to collaborate across multidisciplinary engineering teams.
Must work full-time on-site in San Antonio, Texas.

Responsibilities

Integrate cybersecurity requirements into cloud-native applications, Kubernetes/OpenShift platforms, continuous integration and continuous delivery (CI/CD) pipelines, and containerized workloads throughout the software development lifecycle.
Engineer and implement security controls supporting RMF authorization, Continuous Authority to Operate (cATO), and continuous monitoring objectives.
Identify, assess, and remediate cybersecurity vulnerabilities through vulnerability management, security engineering, and technical risk mitigation activities.
Design and implement Zero Trust security architectures, container hardening, and cloud-security best practices across mission environments.
Collaborate daily with Government leadership, Cyber Operations Teams, Cyber Penetration Teams, software developers, cloud engineers, and cybersecurity assessors to integrate security into Agile and DevSecOps workflows.
Support cybersecurity assessments, penetration testing, security-control validation, and remediation of assessment findings.
Implement and maintain STIGs, security baselines, and secure-configuration standards across development, testing, staging, production, and classified environments.
Evaluate cybersecurity risks and develop technical security solutions that balance mission requirements with enterprise security objectives.
Implement cybersecurity automation to improve engineering efficiency and strengthen the overall security posture.
Enable delivery of resilient, mission-ready software capabilities that support secure operations and accelerate capability delivery to the warfighter.
Serve as the cybersecurity lead supporting all contract value streams.

Desired Qualifications

An advanced degree in Cybersecurity, Computer Science, Engineering, Information Assurance, or a related field is preferred.
One or more of CISSP, Security+, CASP, CySA, or Certified Cloud Security Professional (CCSP) is preferred.
Nine or more years supporting Department of Defense cybersecurity engineering missions is preferred.
Experience implementing Zero Trust architectures is preferred.
Experience supporting cATO is preferred.
Experience securing Kubernetes, OpenShift, containers, or cloud-native platforms is preferred.
Experience implementing DevSecOps security automation and Infrastructure-as-Code is preferred.
Experience supporting IL4, IL5, or IL6 cloud environments is preferred.
Experience supporting Cyber Operations Teams or penetration-testing organizations is preferred.
Experience supporting software-factory environments across multiple security domains is preferred.
Solid AWS Cloud knowledge, including security-tool integrations, data feeds, automation, dashboards, reporting, and vulnerability management, is preferred.

Be Challenged and Make a Difference

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

Description of Task to be Performed:

AnaVation is seeking a highly motivated Information Systems Security Engineer(ISSE) to support a high-visible contract and will be responsible for delivering cybersecurity engineering, secure software development, DevSecOps integration, and Risk Management Framework (RMF) implementation across Department of Defense. The ISSE will serve as an embedded cybersecurity engineer working alongside Government engineers, Cyber Operations Teams (COT), Cyber Penetration Teams (CPT), software developers, cloud engineers, and DevSecOps personnel to engineer, implement, automate, and continuously improve cybersecurity controls supporting mission applications and cloud services. This position supports secure capability delivery across multiple value streams and classification levels while enabling Continuous Authority to Operate (cATO), Zero Trust, and cloud-native cybersecurity initiatives.

Position Responsibilities: The Information Systems Security Engineer (ISSE) provides cybersecurity engineering expertise throughout the system development lifecycle by designing, implementing, testing, and sustaining security controls that enable secure software delivery within agile and DevSecOps environments.

Responsibilities include:

Integrate cybersecurity requirements into cloud-native applications, Kubernetes/OpenShift platforms, CI/CD pipelines, and containerized workloads throughout the software development lifecycle.
Engineer and implement security controls supporting Risk Management Framework (RMF) authorization, Continuous Authority to Operate (cATO), and continuous monitoring objectives.
Identify, assess, and remediate cybersecurity vulnerabilities through vulnerability management, security engineering, and technical risk mitigation activities.
Design and implement Zero Trust security architectures, container hardening, and cloud security best practices across mission environments.
Collaborate daily with Government leadership, Cyber Operations Teams (COT), Cyber Penetration Teams (CPT), software developers, cloud engineers, and cybersecurity assessors to integrate security into Agile and DevSecOps workflows.
Support cybersecurity assessments, penetration testing, security control validation, and remediation of assessment findings.
Implement and maintain Security Technical Implementation Guides (STIGs), security baselines, and secure configuration standards across development, testing, staging, production, and classified environments.
Evaluate cybersecurity risks and develop technical security solutions that balance mission requirements with enterprise security objectives.
Implement cybersecurity automation, improving engineering efficiencies, and strengthening the overall security posture.
Enable the delivery of resilient, mission-ready software capabilities that support secure operations and accelerate capability delivery to the warfighter.
Serve as the cybersecurity lead supporting all contract value streams.

Required Qualifications:

Clearance: U.S. Citizen, TS/SCI cleared within last 2 years; CI Polygraph within last 5 years
Education: Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field
Certification: One or more of the following: CISSP, CCSP, AWS Security Specialty or Equivalent DoD 8140 certification
Location: Full-time on-site in San Antonio, TX.
Experience and knowledge:
Nine or more years supporting Department of Defense or Intelligence Community cybersecurity missions.
Nine or more years of cybersecurity engineering, information assurance, RMF, DevSecOps, or cloud security experience.
Experience implementing cybersecurity controls within cloud-native or containerized environments.
Experience supporting RMF implementation and security engineering activities.
Working knowledge of NIST SP 800-53, RMF, STIG implementation, vulnerability management, and continuous monitoring.
Experience integrating cybersecurity into Agile software development environments.
Experience supporting Kubernetes, OpenShift, containers, or cloud platforms.
Excellent written and verbal communication skills.
Ability to work collaboratively across multidisciplinary engineering teams.
Experience with administering, configuring, integrating, and troubleshooting tools such as:
SIEM: Elastic / Elasticsearch / Kibana
Vulnerability Scanning: ACAS, Tenable/Nessus
Cloud Security: AWS Security Hub, Prowler
Container Security: Twistlock / Prisma Cloud Compute (PCC)
GRC and Automation: RegScale (not yet implemented but coming)
Collaboration and Work Management: Jira, Confluence, Mattermost

Preferred Qualifications:

Clearance: TS/SCI w/CI Poly

Education: Advanced degree in Cybersecurity, Computer Science, Engineering, Information Assurance, or related field.

Certification: One or more of the following: CISSP, Sec+, CASP, CySA, Certified Cloud Security Professional (CCSP).

Experience an Knowledge:

Nine or more years supporting DoD cybersecurity engineering missions.

Experience implementing Zero Trust architectures.

Experience supporting Continuous Authority to Operate (cATO).

Experience securing Kubernetes, OpenShift, containers, or cloud-native platforms.

Experience implementing DevSecOps security automation and Infrastructure-as-Code.

Experience supporting IL4/IL5/IL6 cloud environments.

Experience supporting Cyber Operations Teams or penetration testing organizations.

Experience supporting software factory environments across multiple security domains.

Solid AWS Cloud knowledge who understands security tool integrations, data feeds, automation, dashboards, reporting and vulnerability management

Benefits

Generous cost sharing for medical insurance for the employee and dependents
100% company paid dental insurance for employees and dependents
100% company paid long-term and short-term disability insurance
100% company paid vision insurance for employees and dependents
401k plan with generous match and 100% immediate vesting
Competitive Pay
Generous paid leave and holiday package
Tuition and training reimbursement
Life and AD&D Insurance

About AnaVation

AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.

If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!

AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.

About the Company

AnaVation

Federal IT engineering services and cybersecurity

AnaVation provides IT engineering services to the U.S. Federal Government, focusing on complex technical and analytical challenges. It works by delivering contract-based projects that cover intelligence collection and processing, analytical systems, big data solutions, and cybersecurity, using cross-disciplinary engineering teams (called AnaVators) to tailor solutions to government needs. The company differentiates itself through a government-focused, cost-effective approach, deep technical expertise, and a values-driven culture that emphasizes building long-term partnerships and strong customer trust. Its goal is to help federal agencies improve operational efficiency, security, and decision-making by solving difficult technical problems and delivering reliable, mission-critical software and systems.

Company size: 51-200
Company stage: Not listed
Total funding: Not listed
Headquarters: Reston, VA
Founded: 2013

Recently Posted Jobs

Explore more opportunities at AnaVation

See more jobs