Agile Defense

Cybersecurity and IT services for government

Information Systems Security Engineer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeWashington, DC, USA$175k - $190k /yrIn-person

About the Job

Requirements

Senior-level experience providing security engineering leadership in federal or Intelligence Community environments.
Deep expertise in the National Institute of Standards and Technology Risk Management Framework, Federal Information Security Modernization Act, and federal authorization processes.
Demonstrated experience supporting complex, enterprise-scale IT systems across multiple lifecycle stages.
Proven ability to advise leadership on risk-based security decisions.
Required CISSP certification.

Responsibilities

Lead, mentor, and supervise security professionals responsible for end-to-end Risk Management Framework lifecycle execution for Department of Justice information systems.
Direct and coordinate activities within the Prepare step of the Risk Management Framework, ensuring roles, responsibilities, governance structures, and risk management strategies are clearly defined and maintained.
Guide system categorization efforts to ensure information systems are properly classified based on mission impact, data sensitivity, and regulatory requirements.
Direct the selection, tailoring, and documentation of security controls aligned with system categorizations, Department of Justice risk tolerance, and compliance requirements.
Oversee implementation of technical, operational, and management controls across system and application lifecycles, ensuring quality, completeness, and consistency of deliverables.
Serve as the senior technical authority for security architecture decisions, secure configurations, and remediation strategies.
Ensure comprehensive security control assessments are planned, executed, and documented to validate control effectiveness.
Prepare and review risk management documentation to support system authorization decisions and executive-level risk acceptance.
Direct continuous monitoring and ongoing assessment activities, collecting metrics and trends to inform risk posture and adjust security strategies.
Provide subject-matter expertise for cybersecurity risk analysis, incident response, vulnerability remediation, and audit support.
Support Office of Inspector General, Federal Information Security Modernization Act, and internal review activities, ensuring systems remain audit-ready and defensible.
Serve as a trusted technical advisor to Department of Justice leadership, system owners, Information System Security Officers, and mission stakeholders.
Track, report, and communicate security engineering status, risks, and improvement opportunities to Government and contractor leadership.
Foster collaboration across divisions to ensure consistent application of security best practices.
Promote a culture of security awareness through technical guidance, mentoring, and training.
Maintain up-to-date knowledge of the Risk Management Framework, National Institute of Standards and Technology guidance, Department of Justice policies, and industry best practices.
Identify opportunities to improve Risk Management Framework execution efficiency, consistency, and effectiveness through process refinement and approved tooling.

Desired Qualifications

Prior experience supporting Department of Justice or Intelligence Community customers.
Experience working alongside Information System Security Officers, Authorizing Officials, and assessment teams in high-tempo environments.
Familiarity with network, infrastructure, application, and software-as-a-service security architectures.
Experience supporting audit remediation and continuous monitoring programs.

Salary Range: 175000 to 190000 (Currency: USD) (Pay period: per-year-salary)

About Agile Defense

At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.

Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.

Requisition #: 1411

Job Tittle: Information System Security Engineer - SME

Location: Washington, DC

Clearance: TS/ with the ability to obtain an SCI

Required Certification: CISSP

Role Overview

The Information Systems Security Engineer (ISSE) – SME serves as a senior technical authority responsible for leading the implementation and execution of the DOJ’s Security Assessment and Authorization (SAA) Program in accordance with DOJ policy, the SAA Policy Guide, and NIST Risk Management Framework (RMF) requirements. This role provides expert-level security engineering leadership across complex DOJ IT environments, ensuring systems are securely designed, authorized, monitored, and sustained throughout their lifecycle.

The ISSE SME acts as a principal technical advisor to Government leadership, system owners, ISSOs, and engineering teams, driving consistent, high-quality RMF execution and risk-informed decision-making.

Key Responsibilities

RMF & SAA Program Leadership

· Lead, mentor, and supervise security professionals responsible for end-to-end RMF lifecycle execution for DOJ information systems.

· Direct and coordinate activities within the Prepare step of RMF, ensuring roles, responsibilities, governance structures, and risk management strategies are clearly defined and maintained.

· Guide system categorization efforts to ensure information systems are properly classified based on mission impact, data sensitivity, and regulatory requirements.

Security Engineering & Control Implementation

· Direct the selection, tailoring, and documentation of security controls aligned with system categorizations, DOJ risk tolerance, and compliance requirements.

· Oversee implementation of technical, operational, and management controls across system and application lifecycles, ensuring quality, completeness, and consistency of deliverables.

· Serve as the senior technical authority for security architecture decisions, secure configurations, and remediation strategies.

Assessment, Authorization & Continuous Monitoring

· Ensure comprehensive security control assessments are planned, executed, and documented to validate control effectiveness.

· Prepare and review risk management documentation to support system authorization decisions and executive-level risk acceptance.

· Direct continuous monitoring and ongoing assessment activities, collecting metrics and trends to inform risk posture and adjust security strategies.

Risk, Incident & Audit Support

· Provide subject-matter expertise for cybersecurity risk analysis, incident response, vulnerability remediation, and audit support.

· Support OIG, FISMA, and internal review activities, ensuring systems remain audit-ready and defensible.

Stakeholder Engagement & Reporting

· Serve as a trusted technical advisor to DOJ leadership, system owners, ISSOs, and mission stakeholders.

· Track, report, and communicate security engineering status, risks, and improvement opportunities to Government and contractor leadership.

· Foster collaboration across divisions to ensure consistent application of security best practices.

Training & Continuous Improvement

· Promote a culture of security awareness through technical guidance, mentoring, and training.

· Maintain up-to-date knowledge of RMF, NIST guidance, DOJ policies, and industry best practices.

· Identify opportunities to improve RMF execution efficiency, consistency, and effectiveness through process refinement and approved tooling.

Qualifications & Experience

Required

· Senior-level experience providing security engineering leadership in federal or IC environments.

· Deep expertise in NIST RMF, FISMA, and federal authorization processes.

· Demonstrated experience supporting complex, enterprise-scale IT systems across multiple lifecycle stages.

· Proven ability to advise leadership on risk-based security decisions.

Preferred / Highly Desired

· Prior experience supporting DOJ, or Intelligence Community customers.

· Experience working alongside ISSOs, AOs, and assessment teams in high-tempo environments.

· Familiarity with network, infrastructure, application, and SaaS security architectures.

· Experience supporting audit remediation and continuous monitoring programs.

Our Core Values

Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together.

What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are.

Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.
Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.
Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.
Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.
Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.
Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

About the Company

Agile Defense

Cybersecurity and IT services for government

Agile Defense provides IT and cybersecurity services to the U.S. Federal Government, including digital transformation, IT modernization, and a Virtual Security Operations Center (VSOC) to defend against cyber threats. Its services support national security and civilian missions across federal agencies, delivered through various contract vehicles. The company expands its capabilities through acquisitions (IntelliBridge and XOR Security) and focuses on AI-enabled workforce transformation and enterprise IT to enhance government operations. Unlike many suppliers, Agile Defense emphasizes a government-focused portfolio with a multidimensional VSOC and AI-driven workforce upgrades, positioning itself to meet federal security and modernization needs. The goal is to help federal agencies protect data and systems, modernize IT infrastructure, and improve cyber resilience across national security and civilian missions.

Company size: 1,001-5,000
Company stage: Acquired
Total funding: Not listed
Headquarters: Reston, VA
Founded: 1998

Recently Posted Jobs

Explore more opportunities at Agile Defense

See more jobs