C

Cambridge International Systems Inc

Designs and delivers cyber-physical security solutions

Information Systems Security Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeNorth Charleston, SC, USA$103k - $121k /yr

About the Job

Requirements

  • A bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, or Electronics Engineering, or Mathematics with a concentration in Computer Science, or a related discipline; the degree program must be ABET-accredited.
  • At least three years of experience developing, implementing, and maintaining cybersecurity policies, including Assessment and Authorization activities.
  • Demonstrated experience engineering National Institute of Standards and Technology Risk Management Framework controls and producing Risk Management Framework artifacts.
  • A current and active Top Secret security clearance.
  • A Department of Defense 8570/8140 Level I certification in Information Assurance Management, Information Assurance Technical, or Information Assurance System Architect and Engineer.

Responsibilities

  • Integrate cybersecurity requirements into system architectures, engineering designs, interface specifications, and lifecycle documentation.
  • Engineer, implement, and validate controls under the National Institute of Standards and Technology Risk Management Framework, National Institute of Standards and Technology Special Publication 800-53, Committee on National Security Systems Instruction 1253, and Department of Defense cybersecurity guidance.
  • Conduct architecture reviews, vulnerability assessments, threat and risk analyses, attack surface analyses, and mitigation planning.
  • Participate in design reviews, technical interchange meetings, and configuration control boards to incorporate cybersecurity from the outset.
  • Develop and maintain system security plans, control implementation statements, security and network diagrams, interface documents, and engineering analyses.
  • Support Risk Management Framework activities, including Security Assessment Plans, Security Assessment Reports, Plans of Action and Milestones, continuous monitoring documentation, and authorization artifacts.
  • Identify security gaps and architectural risks and recommend practical engineering solutions.
  • Collaborate with engineering teams to establish and maintain secure configuration baselines.
  • Evaluate system changes, technology insertions, and architecture modifications for cybersecurity and accreditation impacts.
  • Analyze vulnerability scan results, prioritize findings, plan remediation, and validate corrective actions.
  • Participate in integration, testing, verification, validation, and accreditation activities to confirm security controls perform as intended.
  • Assess control effectiveness through continuous monitoring and recommend improvements.
  • Ensure secure integration of commercial off-the-shelf, government off-the-shelf, open-source, cloud-based, and custom-developed technologies.
  • Provide guidance on secure design, defense-in-depth, Zero Trust principles, and cybersecurity best practices.
  • Prepare technical reports, engineering recommendations, risk assessments, and executive briefings.
  • Travel between work locations, including company offices, customer sites, and government installations, as required; travel requirements will be communicated during the hiring process.
  • Work may include occasional extended hours, including evenings or weekends, as needed.

Desired Qualifications

  • Experience supporting Department of Defense, Intelligence Community, or other classified government systems.
  • Understanding of secure systems engineering, defense-in-depth, Zero Trust architectures, and large-scale distributed systems.
  • Experience with operating systems, networking, virtualization, cloud, identity and access management, encryption, and cybersecurity technologies.
  • Experience with vulnerability assessment tools such as Assured Compliance Assessment Solution, Nessus, or Security Content Automation Protocol.
  • Experience with cloud security, hybrid environments, containers, Kubernetes, or DevSecOps pipelines.
  • Familiarity with PowerShell, Python, Ansible, Terraform, the Department of Defense Enterprise DevSecOps Reference Design, or Platform One.
  • Additional security certifications such as Security+, Certified Information Systems Security Professional, CompTIA Advanced Security Practitioner, Certified Cloud Security Professional, GIAC certifications, or Information Assurance System Architect and Engineer certifications.
  • Strong technical writing and verbal communication skills for technical and leadership audiences.
  • Experience with large-scale defense, intelligence, or space systems, including ground infrastructure, mission operations, networks, cloud, or enterprise IT.

About the Company

Cambridge International Systems Inc

Designs and delivers cyber-physical security solutions

Cambridge International Systems designs and delivers capacity-building and security solutions across cyber and physical domains, working in sectors such as critical infrastructure, border security, aviation, threat finance, banking, and health security. It uses holistic discovery to understand complex environments and then deploys integrated, multi-domain solutions that address people, processes, and technology, with advisory, implementation, and ongoing support. With nearly 30 years of experience in high-stakes environments, it focuses on end-to-end capacity-building and holistic problem-solving rather than isolated tools, serving clients globally. Its goal is to reduce risk from sophisticated threats and strengthen security and resilience to enable successful operations.

Company size
201-500
Company stage
Not listed
Total funding
Not listed
Headquarters
Arlington, WV
Founded
1994

Recently Posted Jobs

Explore more opportunities at Cambridge International Systems Inc

See more jobs