Information System Security Engineer (ISSE) - Alexandria, VA

ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their roles. The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers. If you have the required skill set, education requirements, and experience, please click the submit button and follow the next steps. Unless specifically stated otherwise, this role is "On-Site" at the location detailed in the job post. Job Description
Akima Data Management (ADM) is seeking a highly skilled and mission‑driven Information System Security Engineer (ISSE) to design, engineer, and validate cybersecurity capabilities across Department of War (DoW) Office of Inspector General (OIG) information systems. The ISSE will ensure systems are architected, implemented, and sustained in alignment with federal, DoD, and organizational cybersecurity requirements. This role integrates security engineering into the full system lifecycle—requirements, design, development, testing, deployment, and continuous monitoring.
The ideal candidate brings deep technical expertise, strong understanding of cybersecurity engineering frameworks, and the ability to collaborate across engineering, operations, leadership, and external stakeholders. This position is essential to safeguarding OIG’s mission‑critical systems and ensuring secure, resilient, and compliant operations across the enterprise.
This role is based in Alexandria, VA, supporting the Cybersecurity Division. The ISSE plays a critical role in ensuring the confidentiality, integrity, and availability of DoW OIG’s systems and data while enabling mission success through secure, resilient engineering practices. 
Responsibilities
Define, refine, and validate security requirements based on mission objectives, threat assessments, risk analyses, and applicable cybersecurity policies, standards, and frameworks.
Design and implement secure system architectures, data flows, and engineering solutions aligned with NIST, DoD, FedRAMP, and Zero Trust principles.
Develop security engineering artifacts, interface control documents, system security plans (SSPs), and technical documentation supporting RMF authorization and accreditation activities.
Conduct security architecture reviews, threat modeling, vulnerability assessments, and security impact analyses for on-premises, cloud, and hybrid environments.
Lead cloud vulnerability management efforts, including vulnerability scanning, assessment, prioritization, remediation tracking, and risk reporting across enterprise cloud platforms.
Develop, review, and maintain cybersecurity policies, standards, procedures, and implementation guidance to ensure compliance with federal, DoD, and organizational requirements.
Engineer and implement security controls, secure configurations, STIGs, SRGs, and baseline hardening requirements across systems, applications, cloud services, and networks.
Perform technical control assessments, security testing, validation activities, and control effectiveness reviews to verify compliance and mitigate risk.
Analyze security findings, recommend risk-based mitigation strategies, and support POA&M development, remediation management, and closure activities.
Integrate security requirements throughout the System Development Life Cycle (SDLC), ensuring secure coding, configuration management, and deployment practices.
Conduct security assessments for system upgrades, patches, cloud migrations, integrations, and infrastructure changes to identify and mitigate potential risks.
Design and support continuous monitoring capabilities, including automated vulnerability scanning, logging, alerting, and security analytics solutions.
Provide technical support for incident response, forensic investigations, containment, eradication, and recovery operations.
Assess emerging threats, vulnerabilities, cloud technologies, and adversary tactics to strengthen organizational security posture and resilience.
Translate complex security engineering requirements into actionable guidance for system administrators, developers, architects, and operational teams.