Information Systems Security Engineer

Description Markon is seeking an experienced Information Systems Security Engineer (ISSE) to support the Fort Meade customer by providing cybersecurity engineering expertise for mission-critical systems supporting the Cyber Threat Intelligence (CTI) mission. This role evaluates system and cloud architectures, develops security requirements and technical documentation, supports authorization activities, and identifies and mitigates vulnerabilities across classified and unclassified environments. The ISSE will work closely with systems engineers, security teams, and Government stakeholders to integrate cybersecurity throughout the system lifecycle and ensure compliance with applicable Intelligence Community security requirements. Responsibilities Assess existing and proposed IT architectures for compliance with cybersecurity requirements and applicable security frameworks, including ICD 503. Develop and maintain information security policies, standards, procedures, and technical guidance. Support Assessment and Authorization (A&A) activities and development of associated security documentation. Develop and review security-related artifacts, including system security designs, Concepts of Operations (CONOPS), implementation plans, operational procedures, and system documentation. Provide security engineering support for authorization, accreditation, test, and evaluation activities. Perform continuous monitoring of information systems and evaluate changes that may impact system security or authorization. Develop security architecture deliverables and define technical countermeasures for operational systems and systems under development. Evaluate proposed system and cloud security architectures to determine whether designs satisfy cybersecurity and compliance requirements. Identify, document, track, and support remediation of system vulnerabilities throughout the system lifecycle. Perform and analyze vulnerability scans using Nessus and other cybersecurity assessment tools. Apply Risk Management Framework (RMF) processes to evaluate security controls, document risk, and support system authorization. Collaborate with systems engineers, developers, cloud engineers, and security personnel to integrate security requirements into system designs. Provide cybersecurity recommendations and communicate technical risks to both engineering teams and executive stakeholders. Qualifications Required Qualifications Active TS/SCI w/ Polygraph with this Customer. Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical discipline and the required experience for the SE5 labor category. CISSP certification required. Experience performing security engineering and cybersecurity assessments of Government information systems. Strong understanding of ICD 503, Risk Management Framework (RMF), A&A processes, and Government cybersecurity policies and procedures. Experience with…