Information Systems Security Engineer (Cybersecurity)

Location: Onsite 5 days a week in Washington, DC, United States

Salary: $130,000–$190,000 per year

Company

hirify.global provides Microsoft consulting services, cloud services, business intelligence, unified communications, and systems management solutions to public sector and commercial organizations, with a focus on federal government agencies.

What you will do

• Integrate security engineering principles, requirements, and controls into information-system design, development, testing, and sustainment throughout the SDLC.
• Serve as the primary security engineering authority for system owners, ISSOs, and development teams pursuing and maintaining Authorization to Operate (ATO).
• Identify security requirements, participate in design reviews, and recommend solutions to mitigate risks.
• Support NIST SP 800-53/RMF control categorization, selection, implementation, and assessment, including SSPs, SARs, and POA&Ms for ATO packages.
• Engineer and validate access control, auditing, encryption, and boundary-protection controls; support security testing, vulnerability management, remediation prioritization, and change-impact assessments.
• Prepare architecture diagrams, control implementation statements, interconnection security agreements, and other technical security documentation while advising ISSOs, program managers, and developers.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, ideally with 8 years of experience.
• Federal-environment experience using the SDLC to integrate security engineering principles, requirements, and controls into information systems.
• Experience serving as the primary security engineering authority supporting ATO achievement and maintenance.
• Experience with design reviews, risk-mitigation recommendations, NIST SP 800-53/RMF, and development of SSPs, SARs, and POA&Ms.
• Experience supporting vulnerability management, remediation prioritization, and security-impact assessments for proposed system changes.
• Ability to prepare effective technical security documentation and advise ISSOs, program managers, and developers throughout the system lifecycle.
• One or more of the following certifications: CISSP, ISSEP, Security+, CASP+/SecurityX, CISM, or CSSP.
• Active Top Secret Clearance required.
• Must be able and willing to work onsite 5 days a week in Washington, DC.
• Some positions may require up to a 10-year background investigation and/or US Citizenship.

Culture & Benefits

• Full-time role within the Federal Division / Cleared Opportunities.
• Work supports public-sector projects and federal government agencies.
• Employment opportunities are provided without discrimination based on protected characteristics.
• Benefits information is provided in the hirify.global 2026–2027 Benefits Guide.