Information System Security Engineer – Hybrid

Coalfire

Mid-level Information System Security Engineer providing cybersecurity engineering support at Coalfire. Responsibilities include system assessments, security testing, and controls implementation.

Posted 7/14/2026full-timeWashington • District of Columbia, Washington • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity information assurance, including security impact assessments, risk analysis, and the implementation of security controls. Proficient in the NIST Risk Management Framework and cloud solutions, with a strong focus on system security engineering and compliance.

Highest-signal resume keywords

ISSE ExperienceSecurity Impact AnalysisNIST Risk Management FrameworkCloud Solutions (IaaS, PaaS, SaaS)Security Baselines Creation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Information AssuranceSecurity TestingRisk AnalysisSecurity Controls ImplementationSecurity Engineering PrinciplesSystem Development Life CycleSecurity Specification ReviewsFISMA ComplianceSecurity Impact AssessmentsDocumentation Updates

Soft Skills

CommunicationWritten CommunicationVerbal Communication

Certifications & Qualifications

Cloud Certifications

Industry Keywords

NIST Special PublicationsInformation Systems SecurityCybersecurityIT SecurityRisk Assessment

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Provide services related to the enhancement, expansion, or consolidation of cybersecurity information assurance support
Support in performing security impact assessments, security testing, and working with operations and development teams on remediation and mitigation of findings
Provide support to planning, designing and implementing security controls which safeguard and monitor events for information systems, enterprise applications and data
Provide information system security engineering support to verify and validate proposed architectures and implementations based on sound security engineering principles and practices
Identify security requirements and provide input to the system design to ensure the proper controls are built-in
Participate in planning and executing in the system development life cycle of new system cycles
Conduct risk analysis and update the risk assessment report for all changes to the FISMA systems; and provide a security impact analysis to include but not limited to the change to the overall system risk rating and posture and documentation that is impacted requiring updates

Requirements

What you’ll need

5 years of professional ISSE experience or similar roles in the cybersecurity / IT space
Experience performing IT product security specification reviews
Prior experience in creating Security baselines for Information systems and must perform a Security Impact analysis for all exceptions or deviations.
Understanding of the NIST Risk Management Framework and associated special publications (800-37, 800-53, etc)
Understanding of cloud solutions e.g. IaaS, PaaS, and SaaS
Cloud related experience and or certifications
Communication, written, verbal JCAM experience preferred

Benefits

Comp & perks

Paid parental leave
Flexible time off
Certification and training reimbursement
Digital mental health and wellbeing support memberships
Comprehensive insurance options