Information System Security Engineer - Information Systems Security Engineer, Manager
$137.5k - $278.3k+ Discretionary annual incentive
Expert
Bachelor's
Washington, DC, USA
In PersonOnsite at the client site in Washington, D.C., five days a week.
CybersecuritySecurity Engineering & Architecture
No H1B Sponsorship
US Top Secret Clearance Required
About the job
Requirements
- Strong technical skills and experience with information technology and Operational Technology, both on-premises and in the cloud, including FedRAMP.
- Ability to provide security recommendations and integrate security early in the systems development life cycle.
- Experience supporting systems through all steps of the Risk Management Framework life cycle, including developing compliant Assessment and Authorization documentation.
- Ability to work independently and collaboratively.
- Effective written and verbal communication skills.
- Meticulous attention to detail and quality of work product.
- Ability to build and sustain professional relationships.
- Ability to lead projects or workstreams.
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment.
- Strong interpersonal skills and professional demeanor.
- Ability to meet deadlines.
- Ability to provide clear guidance to others.
- Bachelor’s degree.
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
- Active Top Secret clearance with SCI eligibility is required.
- Must be able to work onsite five days a week at the client site in Washington, D.C.
- At least 12 years of experience serving as an Information Systems Security Engineer supporting U.S. Department of Defense or federal government information systems, including information security engineering, system or application design and architecture, application security, and security architecture.
- At least 12 years of experience implementing Security Technical Implementation Guides for information systems.
- Must hold one of the following certifications: Certification in Risk and Information Systems Control or Certified Information Systems Security Professional.
Responsibilities
- Design, build, and integrate security capabilities into information systems, applications, and cloud architectures.
- Lead system architecture and Security Technical Implementation Guide compliance.
- Support Authorization to Operate activities across information technology and Operational Technology systems, including developing security documentation and implementing controls.
- Develop and maintain security engineering artifacts and compliance evidence to support authorization decisions and ongoing security requirements.
- Assess security maturity, identify architecture and control gaps, and drive remediation actions with stakeholders.
- Collaborate with systems engineers, architects, compliance teams, and client stakeholders to resolve technical security issues and strengthen operational resilience.
Desired Qualifications
- Experience supporting operational mission systems.
- Experience applying the National Institute of Standards and Technology Risk Management Framework to security and compliance activities.
- Experience with governance, risk and compliance tools such as JCAM and OpenRMF.
About the company
Deloitte audits companies and advises businesses and governments on tax, technology, and risk, and it is one of the Big Four, the world's four largest accounting firms. In 1849 its founder became the first independent auditor of a public company, Britain's Great Western Railway. Its auditors check companies' financial reports for errors and fraud before investors rely on them, while its consultants design strategy, install business software, and defend clients against cyberattacks. Clients pay fees for each audit or project, and each country's Deloitte firm is a separate business owned by its local partners. Deloitte was founded in London in 1845 and is based in New York.
Company Size
10,001+
Company Stage
Late Stage VC
Total Funding
$17.1M
Headquarters
Madrid, Spain
Founded
1845
Get referred to Deloitte
See people who can refer or advise you
Simplify's Take
What believers are saying
- Growth keeps hiring going: revenue rose 5.7% to $74.5 billion and staff neared 500,000 in the year to May 2026.
- AI is part of the job: in October 2025, Deloitte opened the Claude assistant to 470,000 people, Anthropic's largest rollout.
- Making partner pays off: Deloitte UK's 784 equity partners averaged £1.125 million in profit in the year to May 2026.
What critics are saying
- Tech consulting is lagging: it grew 2.5% in the year to May 2026, the slowest of Deloitte's four businesses.
- Back-office benefits are shrinking: Deloitte US will halve parental leave to 8 weeks for internal staff in January 2027.
- Federal work brings scrutiny: Deloitte agreed to pay $21.5 million in August 2026 over claims diversity targets swayed promotions.
What makes Deloitte unique
- Deloitte is the biggest Big Four accounting firm: fiscal 2025 revenue of $70.5 billion beat PwC's $56.9 billion.
- Consulting runs deeper here: Deloitte kept its consultants in 2003 after PwC, EY, and KPMG sold or spun off theirs.
- Deloitte leads cyber consulting: it took 32% of worldwide security consulting revenue in 2025, research firm Gartner says.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Professional Development Budget
- Hybrid Work Options