Information Systems Security Engineer
Systems Planning and Analysis
Information Systems Security Engineer
Systems Planning and Analysis
Provides data-driven national security analytics
Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in spirit and practice, producing Results that Matter. Come work with the best! We offer opportunity, unique challenges, and clear-sighted commitment to the mission. SPA: Objective. Responsive. Trusted.
The Cybersecurity Team under SPA’s Information Technology Department establishes and maintains a robust cybersecurity posture and policy architecture across SPA's information systems. The team manages cyber policy, develops control implementations and system security plans, continuously monitors SPA systems, and performs routine cyber operations including patching, auditing, and incident response. Cybersecurity is critical to SPA's mission, therefore we strive to offer secure solutions that ensure data is protected while meeting the needs of the business.
In this role, you will serve as the Information Systems Security Engineer (ISSE) for multiple classified systems operating at SPA's Headquarters in Alexandria, VA and nearby satellite office locations. This requires the individual to operate with autonomy as the lead operator for many of SPA's defensive cyber tools. This role also serves as the primary point of contact between SPA and government Cybersecurity Service Providers (CSSPs) that support SPA's classified infrastructure.
SPA has an immediate or near-term need for an ISSE.
The Information System Security Engineer (ISSE) handles daily security operations and continuous monitoring for classified networks, with a heavy focus on ACAS and Trellix ESS tools. In this role, you will run regular reviews and technical inspections to find and fix security vulnerabilities. You will perform system audits, handle incident response tasks, and track technical security guidance across the network. You will collaborate with networking teams to build accurate asset lists, configure ACAS policies using current best practices, and run daily vulnerability scans on SIPR networks. Daily tasks include checking dashboards for login failures, high vulnerability counts, or highly exploitable vulnerabilities. You will troubleshoot credential issues, work with system and network admins to resolve authentication problems within a week, and send compliance reports to leadership every two weeks. You will also run weekly discovery and compliance scans, manually upload monthly DoD audit files, and set up Nessus agents. Additionally, you will maintain the latest Trellix point products on Windows and Linux systems, perform DISA STIG reviews, and manage compliance dashboards. You will coordinate with the CSSP to ensure ACAS and ESS tools are working properly, resolve data reporting issues, and help the team prepare for DCSA Technical Reviews, incident response reviews, and Cyber Operational Readiness Assessments (CORA).
Required Qualifications:
Desired Qualifications:
Many jobs at SPA require obtaining, holding, and maintaining eligibility for a designated clearance based on the company and/or client contract requirements. Should it be required, an individual must be able to obtain the appropriate clearance within a reasonable amount of time based on the needs of the client. In some cases, the individual may need the requisite clearance before being able to be actively employed. Additionally, due to the protected nature of the work process and product at SPA, all positions require the execution of the SPA Non-Disclosure Agreement (NDA). Some employees may be required to sign additional documents or complete other pre-employment or ongoing testing.
SPA employees typically work in a variety of office settings, some at an SPA office and some at designated client locations, where daily activities may include, but are not limited to, walking, standing, or sitting for extended periods, using computers and other technology, and being sequestered in SCIFs or other secured areas with limited access to outside resources or privacy. Other security requirements may inform dress code, personal accessories permitted, or technology usage. When applicable, employees are required to comply with the terms and conditions of client contracts as specified by SPA in its sole discretion, including, but not limited to, hours, location, timing, and technology usage, that meet logistical and security work requirements.
Provides data-driven national security analytics
SPA is a global advisory firm that supports U.S. national security decision-making by using modeling, simulation, and rigorous analysis to inform programs across the Navy, DoD, Homeland Security, and Energy. Its products rely on building models, running simulations, and applying data science, wargaming, and digital engineering in an advanced analytics lab to forecast outcomes and compare options. The firm differentiates itself through a 50-year track record, strong government relationships, and growth via acquisitions that broaden capabilities in space, data science, and wargaming, plus an in-house Office of Innovation. Its goal is to accelerate the delivery of accurate, actionable analyses and new capabilities that help defense leaders choose the best paths for programs and investments.
Explore more opportunities at Systems Planning and Analysis