{"id":3710441,"url":"https://alion.io/job/castelion-information-system-security-engineer-isse","title":"Information System Security Engineer (ISSE)","company":{"id":1795053,"name":"Castelion","domain":"castelion.com","url":"https://alion.io/company/castelion","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Linux","optional":false},{"name":"Red Hat","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Ansible","optional":true},{"name":"Bash","optional":true},{"name":"DLP","optional":true},{"name":"Elastic SIEM","optional":true},{"name":"GitHub","optional":true},{"name":"Hyper-V","optional":true},{"name":"Nessus","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Splunk","optional":true},{"name":"Trivy","optional":true},{"name":"VMWare","optional":true}],"status":"live","first_seen_at":"2026-11-03T20:15:03Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-09T23:54:44Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Why Castelion, Why Now \nCastelion is moving incredibly fast to develop and deliver advanced defense systems at a time when execution matters more than ever. We believe focus, ownership, and excellence are decisive advantages - and we're building a world-class team to turn bold ideas into real capability. \nThis is a rare opportunity to join at an early stage, where you'll have significant ownership, collaborate with exceptional teammates, and make a direct, measurable impact on our mission and the future of the company - regardless of your function. \nInformation System Security Engineer\nThe Information System Security Engineer (ISSE) at Castelion is responsible for translating security requirements into tested controls for classified information systems. In this role, you will harden systems and networks, configure security tools, investigate findings, and work with Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), and IT engineers to support system authorization and continued operation. This position offers the opportunity to build practical security capabilities for disconnected engineering environments that support product development and testing.\nResponsibilities\nHarden Windows, Red Hat Enterprise Linux (RHEL), virtualization platforms, and network infrastructure. Apply Defense Information Systems Agency Security Technical Implementation Guides (DISA STIGs), implement approved access and network-segmentation controls, and test changes with IT engineers to preserve required services.\nConfigure and maintain security information and event management (SIEM), endpoint protection, and centralized logging. Integrate log sources, tune alerts, verify agent and data-collection health, and support investigation, containment, and recovery when security events occur.\nAssess vulnerabilities and security configurations, prioritize findings with system owners, implement approved fixes, and verify results. Document remaining risks and maintain security tools, patches, and update content through approved offline processes.\nWork with the ISSM and ISSO on Risk Management Framework (RMF) activities to obtain and maintain an Authorization to Operate (ATO). Provide configuration records, scan results, system diagrams, control-implementation evidence, and remediation updates for assessments and Plans of Action and Milestones (POA&Ms).\nReview internally developed software, third-party packages, and container images with developers before introduction into classified systems. Support controlled testing and release, automate repeatable security checks, and maintain operating procedures and change records.\nBasic Qualifications\nHands-on experience supporting classified information systems, including work within approved security boundaries and controlled change processes.\nExperience securing Windows and Linux servers or workstations, including authentication, permissions, auditing, and services; working knowledge of Active Directory and Group Policy.\nExperience hardening networks through segmentation, firewall or access-control rules, secure management interfaces, and restriction of unnecessary ports, protocols, and services.\nPractical experience applying DISA STIGs, assessing configurations through automated and manual checks, documenting findings, and verifying corrective actions.\nExperience configuring or maintaining a SIEM, including log collection, searches, alert tuning, and investigation.\nExperience deploying or administering endpoint protection, including policy configuration, agent health, update management, approved exclusions, and troubleshooting.\nExperience using vulnerability-assessment tools to identify findings, evaluate operational impact, and confirm remediation.\nExperience supporting ISSM/ISSO authorization activities, security-control evidence, assessment preparation, and finding closure under the RMF.\nAbility to troubleshoot security configurations, document work clearly, and explain technical risks and proposed fixes to security and IT teams.\nExperience performing privileged administration on secure or classified systems, including administrative account management, access controls, audit logging, and documented configuration changes.\nMust possess and maintain a current cybersecurity certification accepted for the position’s assigned DoD Cyber Workforce Framework (DCWF) work role and proficiency level, and meet applicable DoD 8140.03 and program qualification requirements.\nPreferred Skills and Experience\nExperience maintaining air-gapped systems, including approved media transfers, offline patches, security-content updates, and local software repositories.\nExperience with Splunk or Elastic Security, including Linux rsyslog, Windows event forwarding, or similar log collection methods.\nExperience with Trellix endpoint protection, ePolicy Orchestrator (ePO), or data loss prevention (DLP); Nessus/Tenable; or Security Content Automation Protocol (SCAP) assessment tools and STIG Viewer. Equivalent tool experience is relevant.\nExperience securing VMware vSphere/ESXi or Microsoft Hyper-V, storage and backup services, and Juniper or comparable network infrastructure.\nExperience with PowerShell, Bash, Python, or Ansible to automate configuration checks, evidence collection, or approved remediation.\nExperience with eMASS or comparable authorization-documentation tools, initial system authorization, and applicable NIST security controls, Defense Counterintelligence and Security Agency (DCSA) requirements, or the Joint Special Access Program Implementation Guide (JSIG).\nExperience reviewing software dependencies, container images, and software bills of materials (component inventories), using tools such as Trivy, Anchore, or equivalent. Familiarity with approved on-premises source-control and build/release workflows, such as GitHub Enterprise Server.\nAdditional Requirements\nAbility to put in extended hours, including evenings and weekends, when required to meet aggressive timelines.\nThis role is based in Torrance, CA and requires full-time onsite presence.\nOccasional travel is required.\nPhysical Demands\nAbility to lift and move equipment weighing at least 40 pounds when supporting equipment installation or maintenance, with or without reasonable accommodation.\nOther Duties\nPlease note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.\nBenefits and Perks\nAll full-time employees are granted meaningful long-term equity, sharing in the company’s significant growth trajectory. We offer four (4) weeks of paid time off, ten (10) company-paid holidays, and comprehensive health benefits - including 100% employee-covered medical and strong dependent coverage, along with dental and vision plans. We also provide paid parental leave to support growing families, a $100 monthly fitness stipend to promote health and performance, and onsite EV charging for convenience. In addition, employees enjoy perks like catered meals, company-covered food during high-demand periods, and a fully stocked kitchen to stay fueled throughout the day.\nSecurity Clearance and Access\nU.S. citizenship is required. Must possess and maintain an active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance and meet applicable program-access requirements. This position requires privileged access to classified systems. Required privileged-user training and system-specific authorizations must be completed before performing privileged duties.\nCastelion offers a generous benefits package. Please refer to the bottom of our Careers page for more details. \nOther Duties \nPlease note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. \nAdditional Eligibility Requirements \nThis position may require access to classified information or restricted U.S. Government sites, systems, or information, as determined by the Company and/or applicable U.S. Government requirements. If the position is so designated, your employment in the role may be contingent upon your ability to obtain and maintain the required U.S. Government security clearance or other government authorization, and to satisfy any citizenship or other eligibility requirements imposed by applicable law, regulation, executive order, or government contract requirements. You will be notified if and when such requirements apply. \nAffirmative Action/EEO Statement \nCastelion is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. \nCastelion is committed to providing reasonable accommodations to qualified individuals with disabilities throughout the application and hiring process. If you require a reasonable accommodation to complete an application, participate in the interview process, or otherwise participate in the hiring process, please contact . Requests for accommodation will be considered on an individual basis and handled in accordance with applicable law. \nCastelion is committed to fostering a workplace where employment decisions are based on qualifications, business needs, and the ability to perform the essential functions of the role, with or without reasonable accommodation. \nEAR/ITAR Requirements \nThis position requires access to export-controlled information, and as such, employment (or hiring of a contractor) is contingent upon the candidate’s ability to access all applicable export-controlled information without additional export licensing being required by the Bureau of Industry and Security and/or the Directorate of Defense Trade Controls.","description_format":"text","description_chars":10221,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Missiles","Defense Manufacturing"],"lifecycle":[{"event":"open","at":"2026-11-03T22:55:33Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":46,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/castelion-information-system-security-engineer-isse","json_url":"https://alion.io/job/castelion-information-system-security-engineer-isse.json","meta":{"generated_at":"2026-11-10T01:14:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2751,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1795053},"rest":"https://alion.io/mcp/rest/get_company?id=1795053"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcastelion-information-system-security-engineer-isse"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcastelion-information-system-security-engineer-isse"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcastelion-information-system-security-engineer-isse"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/castelion-information-system-security-engineer-isse\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcastelion-information-system-security-engineer-isse"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3710441}},{"tool":"search_jobs","arguments":{"company":"castelion.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3710441},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}