Responsibilities
The Information System Security Engineer (ISSE) leads and executes security engineering activities across complex information systems. Responsibilities include designing and implementing security architectures for new and existing networked systems, ensuring hardware, operating systems, and applications meet cybersecurity requirements and RMF‑aligned security controls.
The ISSE validates compliance with configuration guidance, supports testing and evaluation of security designs, and assists with integration testing to confirm that safeguards protecting data and system interconnections function as intended. In production environments, the ISSE continuously monitors security control implementations, responds to risk findings, supports risk assessments, and contributes to POA&M management. The role also includes supporting the development and reporting of system‑level security metrics.
Core Functions
- Log Review & SIEM Analysis — Support ISSO activities by analyzing security logs using SIEM tools such as Splunk and recommending appropriate actions.
- Vulnerability Analysis — Review ACAS scan results and assess findings.
- STIG Compliance — Assist with DISA STIG analysis and implementation to ensure compliant system configurations.
- DevOps/DevSecOps Integration — Ensure development processes incorporate security requirements throughout the lifecycle.
- Continuous Monitoring — Validate system‑level ConMon requirements and ensure alignment with monitoring strategies.
- Secure Engineering Practices — Apply secure design, architecture, and coding principles when implementing controls.
- Cross‑Team Coordination — Collaborate with system leads, ISSOs, and program managers on security activities.
- Security Requirements Engineering — Define, design, implement, and evaluate system and network security measures.
- Risk Assessment — Identify risks, evaluate mitigations, assess residual risk, and provide recommendations.
- Technical Security Solutions — Develop and implement solutions addressing vulnerabilities.
- Security Audits — Lead technical components of internal audits and investigations.
- Regulatory Compliance — Ensure adherence to government regulations and industry standards.
SITE III JIOC Contract Overview
The SITE III JIOC contract establishes a comprehensive, multi‑discipline framework for requirements engineering, solutions engineering, scheduling, reliability, resiliency, service development, integration, test and evaluation, maintainability, and enterprise analysis. This framework supports the full National Defense Intelligence enterprise—including Combatant Commands, Partner Nations, and Federal Agencies—to ensure timely, accurate Joint Intelligence Operations Center (JIOC) collection, correlation, and dissemination.
Our team leverages industry best practices in architecture design, data science, cloud services, DevSecOps, and platform integration to build, sustain, and continuously enhance enterprise business systems, system‑of‑systems integrations, and back‑end workflow processes.
