Information Systems Security Engineer

About Saliense

At Saliense, we are committed to fostering a culture of continuous learning and professional growth. Our employees are encouraged to take on challenging and meaningful work, with ample opportunities for career advancement. We offer competitive compensation and benefits, including:

• 20 Days PTO + 40 Hours of Paid Sick & Safe Time
• 11 Federal Holidays + 2 Corporate Holidays
• Health, Vision, Dental, and Life Insurance
• 401(k) with Tiered Match & 100% Vesting
• Parental Leave for Birthing and Non-Birthing Parents
• Professional Development Reimbursement Program

We believe in empowering our team members to achieve their professional goals while contributing to impactful projects that make a difference. Join us at Saliense and be part of a growing organization dedicated to innovation, collaboration, and excellence. Visit www.saliense.com to learn more.

There are many more - connect with us to get a preview of the full benefits package.

Job Title: Information Systems Security Engineer (ISSE)

Location: Arlington, VA

We are seeking an experienced Information Systems Security Engineer (ISSE) to join our team in Arlington, VA. The ideal candidate will have a strong technical background in cybersecurity, with hands-on experience in assessments, incident response, threat hunting, threat intelligence, malware analysis, and network security.

Responsibilities:

• Design, implement, and maintain security controls to protect information systems and data
• Conduct technical assessments to identify vulnerabilities and recommend remediation strategies
• Ensure compliance with industry standards and regulations
• Collaborate with cross-functional teams to implement security controls in AWS and other various cloud computing environments
• Ensure the environment is updated according to DoD standards and guidelines
• Follow approved DoD, STIG standards and DoD IAVA requirements; advise / make recommendations of needed updates to HBSS Lead
• Ensure that all systems are operating with valid licenses for all installed software
• Monitor and audit configurations to ensure that unintended changes do not occur
• Act as a trusted advisor to clients, understanding cybersecurity or data protection requirements and challenges
• Lead technical discussions, demonstrations, and presentations, effectively communicating the value proposition of our security solutions to both technical and non-technical stakeholders
• Continuous knowledge of industry trends and emerging threats in cyber security to continuously enhance our solutions and customer value
• Work collaboratively with team members, Information Assurance, Information Security Engineering, and other Subject Matter Experts to resolve security issues
• Solid understanding of cybersecurity principles, including, malware analysis, network security, and cloud security
• Solid understanding of security operations, networking, system administration and security architecture
• A clear understanding of cyber risks and the threat landscape related to cyber attacks
• Maintain thorough documentation of all activities and communications through ticketing systems, operational briefs, and status reports
• Support RMF lifecycle activities including system authorization and ATO efforts
• Ensure compliance with DoD, NIST, STIG, and IAVA requirements
• Develop and maintain System Security Plans (SSPs) and IA artifacts
• Validate security control implementation and effectiveness
• Coordinate with ISSOs, system owners, and auditors
• Track POA&M items and remediation status
• Advise stakeholders on compliance gaps and risk posture
• Implement and validate security controls in AWS and cloud environments
• Assess cloud configurations for risk and compliance alignment
• Support secure system migrations and modernization efforts
• Create scan policies, credential management, and endpoint/Nessus agent management on Tenable Nessus Manager
• Review and apply Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) requirements to servers and endpoints
• Perform eMASS or other GRC tools tasks, including system registration & boundary definition, document control implementation, and security control assessment support

Requirements:

• Bachelor’s degree from accredited university
• Minimum 10 years of cybersecurity / information security experience
• Active DoD IAT Level II Certification (Security+, CySA+, SSCP, etc.)
• Active Computing Environment (CE) Certification (AWS, Azure, Linux+, VCP, etc.)
• Active DoD Secret Clearance (or eligibility)
• Strong experience with:

HBSS / endpoint security platforms

Vulnerability assessments

eMASS and GRC tools

Incident response / threat analysis

RMF / STIG / IAVA compliance

Cloud security