Posted 12 days ago
USAF - ISSEcFocus Software · Linthicum Heights
USAF - ISSE
Linthicum HeightsOn-siteFull-time
AI Summary
Engineers and validates security controls, STIG-based configurations, and CI/CD security integration for USAF systems under RMF and ATO processes. Produces technical evidence and remediation support for accreditation activities.
About this role
cFocus Software seeks a Information System Security Engineer (ISSE) to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:
Qualifications:
- Active TS/SCI clearance
- B.S. Computer Science, Information Technology, or a related field
- Experience implementing and validating security controls for enterprise systems and infrastructure.
- Knowledge of RMF, authorization boundaries, control assessments, and compliance evidence.
- Experience with STIGs, secure configurations, vulnerability analysis, and remediation validation.
- Ability to engineer security across networks, operating systems, applications, and cloud services.
- Experience with scripting, IaC/CaC, source control, and security integration in CI/CD workflows.
- Experience configuring logging, monitoring, alerting, and security tool integrations.
- Ability to document designs, test results, configurations, and remediation recommendations clearly.
- Strong collaboration skills across architecture, cybersecurity, development, and operations teams
- Translate Government-approved security architecture, system requirements, and DoD compliance requirements into implementable technical controls and engineering tasks.
- Implement and validate controls enforcing Government-defined authorization boundaries across assigned infrastructure, applications, and cloud services.
- Engineer secure configurations for networks, servers, applications, and supporting services; evaluate proposed changes for security and integration impacts.
- Develop and maintain automation scripts that apply Security Technical Implementation Guides (STIGs) and document system configurations and network diagrams from live environments.
- Integrate Government-specified cybersecurity controls and security guardrails into Continuous Integration/Continuous Deployment (CI/CD) pipelines.
- Implement Infrastructure as Code (IaC) and Configuration as Code (CaC) using centralized repositories and approved baselines; support automated security evaluation before production deployment.
- Configure and validate logging, monitoring, observability, and alerting across authorization boundaries in accordance with approved plans.
- Analyze vulnerability and configuration assessment findings; recommend corrective actions, implement approved fixes, and verify remediation effectiveness.
- Support security testing and assessments by defining technical validation steps, collecting evidence, and resolving identified engineering deficiencies.
- Provide technical evidence, configuration records, test results, and monitoring data supporting Risk Management Framework (RMF), Authorization to Operate (ATO), Assess-Only Authorization, and continuous ATO (cATO) activities.
- Support integration of Cybersecurity Service Provider (CSSP) capabilities and Government-approved cross-domain solutions within assigned security architecture and impact levels.
- Coordinate system-level findings and remediation status with ISSOs and the ISSM; supply engineering analysis for Plans of Action and Milestones (POA&Ms) and risk recommendations.
- Support incident response through approved technical procedures, log analysis, control corrections, and directed recovery or remediation activities.
- Maintain design and as-built documentation, configuration traceability, and implementation procedures; recommend improvements to security automation and monitoring.
Skills
Authorization BoundariesCI/CDCloud SecurityConfiguration As CodeInfrastructure As CodePOA&MRMFScriptingSecurity Control AssessmentSIEM Logging And MonitoringSource ControlSTIGsTS/SCI ClearanceVulnerability Analysis
Explore related jobs
More jobs at cFocus Software
- CFBI - Systems Administrator - CI Poly REQUIREDWashington, DC
- CFBI - Systems Analyst - CI Poly REQUIREDHuntsville, AL
- CFBI - Data Engineer - CI Poly REQUIREDHuntsville, AL
- CFBI - IT Project Lead - CI Poly REQUIREDHuntsville, AL
- CFBI - Information Security Specialist - CI Poly REQUIREDWashington, DC
- CFBI - GIS Systems Engineer - CI Poly REQUIREDHuntsville, AL
Similar CI/CD jobs
- C
Cyber Analyst Mid level w/ Secret clearanceConnect Talent Solutions · Hampton, United States - KSec Dev Ops Engineer - Level 3Knox Systems · United States | Arlington, Virginia
- CSenior Drawings Change SpecialistCACI, INC.-FEDERAL · Warner Robins AFB, GA
- ISenior Platform Engineer (AI Applications)Improvix Technologies · Washington, DC
- H
Staff Backend Engineer, Admin ExperienceHorizon3 · US, Remote - ÖVermessungsingenieur/ Vermessungstechniker – LiegenschaftsvermessungÖbVI Torsten Hentschel · Hermsdorf, Germany
Jobs in Linthicum Heights
- TTask/Data Task LeadTechnica Corporation · Linthicum Heights, MD
- TProgram ManagerTechnica Corporation · Linthicum Heights, MD
- TServices Task/ Strategy Support/ Cybersecurity Task LeadTechnica Corporation · Linthicum Heights, MD
- L
Sr. Cybersecurity Systems EngineerLEIDOS, INC. · Linthicum Heights, Maryland - N
Branch Manager-On SiteNorthrop Grumman Federal Credit Union · Linthicum Heights, MD - LCybersecurity Systems EngineerLEIDOS, INC. · Linthicum Heights, Maryland
Browse these categories
Market data for this role
All reports →- SeriesRole reportsOne role family at a time: how many openings, what changed this week, who is hiring, what it pays.
- SeriesSalary reportsWhat employers publish in job postings, by level and workplace. Not self-reported pay.
- Market overviewState of tech hiring, September 2026: up 4.8%Tech hiring rose 4.8% month over month in September 2026, with 411,122 new listings. Customer support and account executive roles led the growth.