Information Security Engineer

Piper Companies is looking for a Information Security Engineer to join a government contractor in Aberdeen Proving Ground, MD. This role requires the candidate to report onsite and have an active Top Secret or TS/SCI Clearance.

Essential Duties of theInformation Security Engineer:

• Provide systems engineering and analysis support to the C5 community in support of cybersecurity requirements per AR 25-2 and corresponding DA PAMs ensure the security and availability of Mission Command as well as Communications systems
• Provide tailored engineering analysis concerning Cybersecurity integration at the request of Government and advise the Government of any potential technical issues that result from this integration that present risk to achieving the goals of the digital force
• Areas of focus may include communications security development and engineering support as well as programmatic and technology development for external organizations, including joint programs. Technical subject areas include encryption technologies, communications security/transmission security, satellite network security, cellular, radio and Tactical Internet security and cross-domain solutions

Qualifications of theInformation Security Engineer:

• Master's degree and 5+ years experience in a related field
• Must have knowledge of Government security policies and familiarity with security-related technologies, Endpoint Security products, Security Information and Event Management, Public Key Infrastructure and Auditing Tools employed within DoD architectures
• IAT Level II Certification required
• Active Top Secret security clearance required

Compensation for theInformation Security Engineer:

• $120,000 - $150,000 (based on experience)
• Comprehensive benefit package; Cigna Medical, Cigna Dental, Vision, 401k w/ ADP, PTO, paid holidays, sick Leave as required by law

This job opens for applications on 7/8/25. Applications for this job will be accepted for at least 30 days from the posting date

#LI-ONSITE

#LI-BM2

Information Assurance (IA), Risk Management Framework (RMF), NIST SP 800-53, NIST SP 800-37, NIST SP 800-171, NIST SP 800-30, Security Control Assessment (SCA), Security Authorization Package, Authority to Operate (ATO), Interim Authorization to Test (IATT), Plan of Action and Milestones (POA&M), System Security Plan (SSP), Continuous Monitoring (ConMon), Security Technical Implementation Guide (STIG), DISA STIGs, eMASS, Xacta, FedRAMP, DoD Cloud Computing SRG, DoD IL2, IL4, IL5, IL6, Controlled Unclassified Information (CUI), Classified Information, Top Secret/Sensitive Compartmented Information (TS/SCI), Cross Domain Solutions (CDS), Data Loss Prevention (DLP), Insider Threat, Cybersecurity Maturity Model Certification (CMMC), CMMC 2.0, Zero Trust Architecture, Identity and Access Management (IAM), Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Multi-Factor Authentication (MFA), Public Key Infrastructure (PKI), Common Access Card (CAC), Secure Hash Algorithm (SHA), Advanced Encryption Standard (AES), Transport Layer Security (TLS), Secure Socket Layer (SSL), Intrusion Detection System (IDS), Intrusion Prevention System (IPS), Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Host-Based Security System (HBSS), Assured Compliance Assessment Solution (ACAS), Nessus, Tenable, Splunk, ArcSight, Microsoft Sentinel, Vulnerability Management, Patch Management, Configuration Management, Change Control Board (CCB), Security Incident Response, Computer Network Defense (CND), Computer Network Exploitation (CNE), Computer Network Attack (CNA), Cyber Threat Intelligence (CTI), Threat Hunting, Red Team, Blue Team, Purple Team, Penetration Testing, Ethical Hacking, Security Awareness Training, Data Encryption, Data at Rest, Data in Transit, Data in Use, Secure Boot, Secure Baseline, Secure Coding, Software Assurance, Supply Chain Risk Management (SCRM), Mission Assurance, Operational Security (OPSEC), Continuity of Operations (COOP), Disaster Recovery (DR), Business Impact Analysis (BIA), Security Engineering Lifecycle, Defense-in-Depth, Least Privilege, Need to Know, Security Architecture, Network Segmentation, Air Gap, Firewall, VPN, Virtual Desktop Infrastructure (VDI), Cloud Access Security Broker (CASB), Secure Access Service Edge (SASE), Security Control Inheritance, Security Categorization, FIPS 199, FIPS 200, FIPS 140-3, DoD 8500 Series, DoDI 8510.01, DoDI 8500.01, DoDI 8520.02, DoDI 8530.01, DoD CIO, Cybersecurity Service Provider (CSSP), National Security Agency (NSA), Defense Information Systems Agency (DISA), U.S. Cyber Command (USCYBERCOM), Joint Force Headquarters-DoDIN (JFHQ-DoDIN), Defense Counterintelligence and Security Agency (DCSA), National Institute of Standards and Technology (NIST), Office of the Director of National Intelligence (ODNI), Intelligence Community Directive (ICD) 503