Job Requirements
Quantico, VA
Secret Polygraph Unspecified
Senior Level Career (10+ yrs experience)
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Senior Cybersecurity Engineer / ISSO
Full Time | Quantico, VA | Secret Clearance Required
SteelGate is seeking an experienced Senior Cybersecurity Engineer / Information Systems Security Officer (ISSO) to provide cybersecurity engineering, information assurance, vulnerability management, incident response, and security compliance support for the U.S. Government.
The position will work closely with Government cybersecurity leadership and A3T's Systems, Network, Cloud, and Technical Support teams to maintain the confidentiality, integrity, availability, and security posture of the customer’s systems and services.
Key Responsibilities
• Perform ISSO/ISSM cybersecurity support functions for assigned systems and networks.
• Implement and maintain cybersecurity policies, procedures, plans, technical documentation, and security artifacts.
• Support implementation and sustainment of DoD and USMC cybersecurity requirements across enterprise IT systems.
• Conduct cybersecurity engineering reviews and provide security recommendations for systems, applications, network infrastructure, and cloud services.
• Implement, assess, and monitor DISA Security Technical Implementation Guides (STIGs) and applicable security configuration requirements.
• Identify, document, track, and coordinate remediation of system and network vulnerabilities.
• Monitor applicable vulnerability notifications and coordinate implementation of required security updates and corrective actions.
• Support cybersecurity incident identification, reporting, response, investigation, and forensic activities.
• Support and implement Zero Trust cybersecurity principles and requirements.
• Operate, monitor, and support approved cybersecurity technologies, including Microsoft Defender and other Government-approved security tools.
• Review system logs, security alerts, vulnerability findings, and other security information to identify potential cybersecurity threats or deficiencies.
• Coordinate vulnerability remediation activities with Systems Administrators, Network Engineers, Cloud Engineers, and other technical personnel.
• Support configuration and change-management activities to ensure proposed changes maintain the approved cybersecurity posture.
• Review technical changes for cybersecurity impact and recommend appropriate security controls and mitigation measures.
• Support System Authorization Access Request (SAAR) processes and other user-access security requirements.
• Support Trusted Agent functions associated with approved token issuance and user-access processes, as authorized.
• Maintain cybersecurity architecture, configuration, procedures, SOPs, and other required security documentation.
• Track cybersecurity findings, remediation activities, exceptions, and corrective actions through closure.
• Support security testing and validation following system upgrades, configuration changes, patches, and technology refreshes.
• Support upgrades and maintenance of cybersecurity tools and technologies.
• Develop After Action Reports and lessons learned following significant cybersecurity incidents or events.
• Provide cybersecurity guidance and technical assistance to the IT support workforce.
• Coordinate cybersecurity issues with Government cybersecurity personnel and other appropriate DoD/USMC organizations.
Minimum Experience:
• Must have 7–10+ years of progressively responsible cybersecurity, information assurance, or information systems security experience.
• Must have an active DoD Secret security clearance.
• Must satisfy applicable DoD 8140/DCWF requirements for Work Role 521 or 722 at the Advanced proficiency level.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related discipline.
• Experience performing ISSO, cybersecurity engineering, or comparable enterprise cybersecurity functions.
• Strong knowledge of DoD cybersecurity policies and security-control implementation.
• Experience implementing and assessing DISA STIGs.
• Experience with vulnerability identification, tracking, remediation, and reporting.
• Experience supporting cybersecurity incident response and investigation.
• Experience securing Windows, network, virtualization, and/or cloud environments.
• Working knowledge of Microsoft Defender or comparable enterprise security technologies.
• Experience with access control, account security, authentication, and least-privilege principles.
• Experience developing cybersecurity documentation, SOPs, security procedures, and technical reports.
• Experience working with Systems, Network, and Cloud Engineers to remediate security findings.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to operate effectively in a geographically dispersed DoD enterprise environment.
Preferred Qualifications:
• CISSP, SecurityX/CASP+, CySA+, Security+, or other certification appropriate to the assigned DCWF work role.
• Experience with ACAS/Tenable, Microsoft Defender, SIEM/log-analysis tools, endpoint-security platforms, and vulnerability-management technologies.
• Experience with Microsoft Azure and Microsoft 365 security.
• Experience with NIST SP 800-53, RMF, eMASS, POA&Ms, and continuous monitoring.
• Experience with Zero Trust architecture and implementation.
• Previous USMC, Navy, DISA, or other DoD cybersecurity experience.
Job Types: Full-Time
Salary: Based on experience
Schedule: Monday-Friday
Benefits:
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Professional development assistance
• Vision insurance
STEELGATE LLC is a Service-Disabled, Veteran-Owned Small Business (SDVOSB) that prides itself in hiring top-level Subject Matter Experts (SME’s) proven to exceed deliverable expectations. STEELGATE LLC is focused on solving the hard problems facing our government and commercial clients. Our success lies in blending together relevant domain/functional knowledge with deep expertise in Information Technology, Cybersecurity, Defensive Cyber Operations, cloud-based DevSecOps, Data Analytics & AI, Acquisition and Acquisition Management, and more. STEELGATE LLC has a positive, inclusive workplace environment where all team members and partners work towards mutual success. We have established a reliable reach-back program whereas all SMEs are available to support, advise and directly complete mission deliverables when necessary. STEELGATE LLC has a worldwide reputation as a valued and trustworthy partner. Our can-do attitude and willingness to support any mission requirement sets us apart from other small business organizations. Find out more about STEELGATE LLC @ www.steelgatellc.com.
We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.
Full Time | Quantico, VA | Secret Clearance Required
SteelGate is seeking an experienced Senior Cybersecurity Engineer / Information Systems Security Officer (ISSO) to provide cybersecurity engineering, information assurance, vulnerability management, incident response, and security compliance support for the U.S. Government.
The position will work closely with Government cybersecurity leadership and A3T's Systems, Network, Cloud, and Technical Support teams to maintain the confidentiality, integrity, availability, and security posture of the customer’s systems and services.
Key Responsibilities
• Perform ISSO/ISSM cybersecurity support functions for assigned systems and networks.
• Implement and maintain cybersecurity policies, procedures, plans, technical documentation, and security artifacts.
• Support implementation and sustainment of DoD and USMC cybersecurity requirements across enterprise IT systems.
• Conduct cybersecurity engineering reviews and provide security recommendations for systems, applications, network infrastructure, and cloud services.
• Implement, assess, and monitor DISA Security Technical Implementation Guides (STIGs) and applicable security configuration requirements.
• Identify, document, track, and coordinate remediation of system and network vulnerabilities.
• Monitor applicable vulnerability notifications and coordinate implementation of required security updates and corrective actions.
• Support cybersecurity incident identification, reporting, response, investigation, and forensic activities.
• Support and implement Zero Trust cybersecurity principles and requirements.
• Operate, monitor, and support approved cybersecurity technologies, including Microsoft Defender and other Government-approved security tools.
• Review system logs, security alerts, vulnerability findings, and other security information to identify potential cybersecurity threats or deficiencies.
• Coordinate vulnerability remediation activities with Systems Administrators, Network Engineers, Cloud Engineers, and other technical personnel.
• Support configuration and change-management activities to ensure proposed changes maintain the approved cybersecurity posture.
• Review technical changes for cybersecurity impact and recommend appropriate security controls and mitigation measures.
• Support System Authorization Access Request (SAAR) processes and other user-access security requirements.
• Support Trusted Agent functions associated with approved token issuance and user-access processes, as authorized.
• Maintain cybersecurity architecture, configuration, procedures, SOPs, and other required security documentation.
• Track cybersecurity findings, remediation activities, exceptions, and corrective actions through closure.
• Support security testing and validation following system upgrades, configuration changes, patches, and technology refreshes.
• Support upgrades and maintenance of cybersecurity tools and technologies.
• Develop After Action Reports and lessons learned following significant cybersecurity incidents or events.
• Provide cybersecurity guidance and technical assistance to the IT support workforce.
• Coordinate cybersecurity issues with Government cybersecurity personnel and other appropriate DoD/USMC organizations.
Minimum Experience:
• Must have 7–10+ years of progressively responsible cybersecurity, information assurance, or information systems security experience.
• Must have an active DoD Secret security clearance.
• Must satisfy applicable DoD 8140/DCWF requirements for Work Role 521 or 722 at the Advanced proficiency level.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related discipline.
• Experience performing ISSO, cybersecurity engineering, or comparable enterprise cybersecurity functions.
• Strong knowledge of DoD cybersecurity policies and security-control implementation.
• Experience implementing and assessing DISA STIGs.
• Experience with vulnerability identification, tracking, remediation, and reporting.
• Experience supporting cybersecurity incident response and investigation.
• Experience securing Windows, network, virtualization, and/or cloud environments.
• Working knowledge of Microsoft Defender or comparable enterprise security technologies.
• Experience with access control, account security, authentication, and least-privilege principles.
• Experience developing cybersecurity documentation, SOPs, security procedures, and technical reports.
• Experience working with Systems, Network, and Cloud Engineers to remediate security findings.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to operate effectively in a geographically dispersed DoD enterprise environment.
Preferred Qualifications:
• CISSP, SecurityX/CASP+, CySA+, Security+, or other certification appropriate to the assigned DCWF work role.
• Experience with ACAS/Tenable, Microsoft Defender, SIEM/log-analysis tools, endpoint-security platforms, and vulnerability-management technologies.
• Experience with Microsoft Azure and Microsoft 365 security.
• Experience with NIST SP 800-53, RMF, eMASS, POA&Ms, and continuous monitoring.
• Experience with Zero Trust architecture and implementation.
• Previous USMC, Navy, DISA, or other DoD cybersecurity experience.
Job Types: Full-Time
Salary: Based on experience
Schedule: Monday-Friday
Benefits:
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Professional development assistance
• Vision insurance
STEELGATE LLC is a Service-Disabled, Veteran-Owned Small Business (SDVOSB) that prides itself in hiring top-level Subject Matter Experts (SME’s) proven to exceed deliverable expectations. STEELGATE LLC is focused on solving the hard problems facing our government and commercial clients. Our success lies in blending together relevant domain/functional knowledge with deep expertise in Information Technology, Cybersecurity, Defensive Cyber Operations, cloud-based DevSecOps, Data Analytics & AI, Acquisition and Acquisition Management, and more. STEELGATE LLC has a positive, inclusive workplace environment where all team members and partners work towards mutual success. We have established a reliable reach-back program whereas all SMEs are available to support, advise and directly complete mission deliverables when necessary. STEELGATE LLC has a worldwide reputation as a valued and trustworthy partner. Our can-do attitude and willingness to support any mission requirement sets us apart from other small business organizations. Find out more about STEELGATE LLC @ www.steelgatellc.com.
We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.
group id: 91133289
