Information Systems Security Engineer

📋 Job Overview

At Agile Defense, we are seeking an Information System Security Engineer (ISSE) – SME to lead the implementation and execution of the DOJ’s Security Assessment and Authorization (SAA) Program. This role requires a senior technical authority with deep expertise in NIST RMF, FISMA, and federal authorization processes.

🏢 About Agile Defense

At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.

🎯 The Role

The Information Systems Security Engineer (ISSE) – SME serves as a senior technical authority responsible for leading the implementation and execution of the DOJ’s Security Assessment and Authorization (SAA) Program in accordance with DOJ policy, the SAA Policy Guide, and NIST Risk Management Framework (RMF) requirements. This role provides expert-level security engineering leadership across complex DOJ IT environments, ensuring systems are securely designed, authorized, monitored, and sustained throughout their lifecycle.

✅ Key Responsibilities

• Lead, mentor, and supervise security professionals responsible for end-to-end RMF lifecycle execution for DOJ information systems.
• Direct and coordinate activities within the Prepare step of RMF, ensuring roles, responsibilities, governance structures, and risk management strategies are clearly defined and maintained.
• Guide system categorization efforts to ensure information systems are properly classified based on mission impact, data sensitivity, and regulatory requirements.
• Direct the selection, tailoring, and documentation of security controls aligned with system categorizations, DOJ risk tolerance, and compliance requirements.
• Oversee implementation of technical, operational, and management controls across system and application lifecycles, ensuring quality, completeness, and consistency of deliverables.
• Ensure comprehensive security control assessments are planned, executed, and documented to validate control effectiveness.
• Prepare and review risk management documentation to support system authorization decisions and executive-level risk acceptance.
• Provide subject-matter expertise for cybersecurity risk analysis, incident response, vulnerability remediation, and audit support.
• Serve as a trusted technical advisor to DOJ leadership, system owners, ISSOs, and mission stakeholders.
• Promote a culture of security awareness through technical guidance, mentoring, and training.

📌 Required Qualifications

• Senior-level experience providing security engineering leadership in federal or IC environments.
• Deep expertise in NIST RMF, FISMA, and federal authorization processes.
• Demonstrated experience supporting complex, enterprise-scale IT systems across multiple lifecycle stages.
• Proven ability to advise leadership on risk-based security decisions.

⭐ Desirable Experience

• Prior experience supporting DOJ, or Intelligence Community customers.
• Experience working alongside ISSOs, AOs, and assessment teams in high-tempo environments.
• Familiarity with network, infrastructure, application, and SaaS security architectures.
• Experience supporting audit remediation and continuous monitoring programs.

🎁 Benefits

In addition to a salary range of $175,000 - $190,000 a year, Agile Defense invests in its employees beyond just compensation. Agile’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections.

🛂 Visa & Eligibility

Clearance: TS/ with the ability to obtain an SCI

Required Certification: CISSP