Cambridge International Systems, Inc.
Join a dynamic global team united by shared values: commitment, integrity, and perseverance . At Cambridge, you’ll work alongside top talent worldwide, tackling some of today’s most complex and critical challenges in defense and security.
We are currently seeking an Information System Security Engineer (ISSE) to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division in North Charleston, South Carolina. NIWC Atlantic provides design, acquisition, and sustainment services for Marine Corps Systems Command (MCSC) IT systems. This is a full-time CONUS position requiring an active Top Secret clearance.
The base salary range for this role is approximately $103,000 to $121,000 annually. The final offer will be based on relevant experience, skills, internal equity, and market data.
What You’ll Do
As an ISSE, you will integrate cybersecurity into system architectures throughout the system lifecycle, ensuring compliance with government policies, cybersecurity standards, and Risk Management Framework (RMF) requirements. You will partner with engineers, developers, architects, ISSM/ISSO personnel, and government stakeholders to deliver secure, resilient solutions supporting U.S. government missions. You will:
• Integrate cybersecurity requirements into system architectures, engineering designs, interface specifications, and lifecycle documentation.
• Engineer, implement, and validate controls under NIST RMF, NIST SP 800-53, CNSSI 1253, and DoD cybersecurity guidance.
• Conduct architecture reviews, vulnerability assessments, threat and risk analyses, attack surface analyses, and mitigation planning.
• Participate in design reviews, technical interchange meetings, and configuration control boards to incorporate cybersecurity from the outset.
• Develop and maintain SSPs, control implementation statements, security and network diagrams, interface documents, and engineering analyses.
• Support RMF activities including SAPs, SARs, POA&Ms, continuous monitoring documentation, and authorization artifacts.
• Identify security gaps and architectural risks and recommend practical engineering solutions.
• Collaborate with engineering teams to establish and maintain secure configuration baselines.
• Evaluate system changes, technology insertions, and architecture modifications for cybersecurity and accreditation impacts.
• Analyze vulnerability scan results, prioritize findings, plan remediation, and validate corrective actions.
• Participate in integration, testing, verification, validation, and accreditation activities to confirm security controls perform as intended.
• Assess control effectiveness through continuous monitoring and recommend improvements.
• Ensure secure integration of COTS, GOTS, open-source, cloud-based, and custom-developed technologies.
• Provide guidance on secure design, defense-in-depth, Zero Trust principles, and cybersecurity best practices.
• Prepare technical reports, engineering recommendations, risk assessments, and executive briefings.
What You’ll Bring
Required Qualifications:
• Education & Experience: Bachelor’s degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in Computer Science, or a related discipline; degree program must be ABET-accredited.
• Minimum three (3) years of experience developing, implementing, and maintaining cybersecurity policies, including Assessment and Authorization (A&A) activities.
• Technical Expertise: Demonstrated experience engineering NIST RMF controls and producing RMF artifacts.
• Clearance: Must have a current and active Top Secret security clearance.
• Certification: Must hold a DoD 8570/8140 Level I certification in IAM, IAT, or IASAE.
Preferred (Nice to Have):
• Experience supporting DoD, Intelligence Community, or other classified government systems.
• Understanding of secure systems…