Information Systems Security Engineer
Posted 10 Aug 2026
Advertised as “Information Systems Security Engineer (ISSE)”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 9+ yrs
- Management level
- Individual contributor
- Employment
- On-Site
- Contract
- Full-time
No salary listed for this role.
CertificationsCISSP, CCSP, AWS Security Specialty
Field of studyComputer Science, Cybersecurity, Engineering, Information Technology (or related)
Study levelBachelor's
CertificationsCISSP, Security+, CASP, CySA, Certified Cloud Security Professional (CCSP)
Field of studyComputer Science, Cybersecurity, Engineering, Information Assurance (or related)
Study levelMaster's
Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.
Description of Task to be Performed:
AnaVation is seeking a highly motivated Information Systems Security Engineer(ISSE) to support a high-visible contract and will be responsible for delivering cybersecurity engineering, secure software development, DevSecOps integration, and Risk Management Framework (RMF) implementation across Department of Defense. The ISSE will serve as an embedded cybersecurity engineer working alongside Government engineers, Cyber Operations Teams (COT), Cyber Penetration Teams (CPT), software developers, cloud engineers, and DevSecOps personnel to engineer, implement, automate, and continuously improve cybersecurity controls supporting mission applications and cloud services. This position supports secure capability delivery across multiple value streams and classification levels while enabling Continuous Authority to Operate (cATO), Zero Trust, and cloud-native cybersecurity initiatives.
Position Responsibilities: The Information Systems Security Engineer (ISSE) provides cybersecurity engineering expertise throughout the system development lifecycle by designing, implementing, testing, and sustaining security controls that enable secure software delivery within agile and DevSecOps environments.
Responsibilities include:
- Integrate cybersecurity requirements into cloud-native applications, Kubernetes/OpenShift platforms, CI/CD pipelines, and containerized workloads throughout the software development lifecycle.
- Engineer and implement security controls supporting Risk Management Framework (RMF) authorization, Continuous Authority to Operate (cATO), and continuous monitoring objectives.
- Identify, assess, and remediate cybersecurity vulnerabilities through vulnerability management, security engineering, and technical risk mitigation activities.
- Design and implement Zero Trust security architectures, container hardening, and cloud security best practices across mission environments.
- Collaborate daily with Government leadership, Cyber Operations Teams (COT), Cyber Penetration Teams (CPT), software developers, cloud engineers, and cybersecurity assessors to integrate security into Agile and DevSecOps workflows.
- Support cybersecurity assessments, penetration testing, security control validation, and remediation of assessment findings.
- Implement and maintain Security Technical Implementation Guides (STIGs), security baselines, and secure configuration standards across development, testing, staging, production, and classified environments.