SR Computer Scientist - Information System Security Engineer (ISSE)

Description

The Senior Computer Scientist (ISSE) is the primary cybersecurity authority for Unified Mission Management (UMM) tools and CI/HUMINT data-management systems, ensuring security is designed, implemented, assessed, and sustained throughout the system lifecycle.

Position level and location: Senior, one base full-time equivalent; on-site in Reston, Virginia. The position supports a 40-hour workweek, with schedules subject to mission requirements.

Role summary

The ISSE protects UMM software, prototypes, data flows, and operational tools by embedding security controls into system design and development. The role partners with Software Engineers, Data Scientists, Data Management Tool Administrators, the Technology Project Manager, DIA CIO, and the Foreign Disclosure Officer to balance operational needs with DIA, DoD, NIST, and Intelligence Community security requirements.

Key responsibilities

- Ensure UMM tools and data-management systems comply with DIA security requirements and applicable federal security standards.

- Integrate security controls into software design, development, deployment, and sustainment activities.

- Conduct security assessments, risk analyses, vulnerability assessments, and continuous compliance monitoring.

- Support Authority to Operate (ATO) activities, including required security documentation and certification/accreditation coordination.

- Implement security controls in accordance with NIST and DoD standards and applicable DIA frameworks.

- Define and coordinate security requirements for cross-domain data transfers with Service and Combatant Command tool administrators.

- Support secure data-sharing and system-access requirements.

- Coordinate with DIA CIO on security certification, accreditation, and security-update activities.

- Advise the Technology Project Manager on security requirements and support Software Engineers in applying secure coding practices.

- Ensure foreign-disclosure requirements and controls are incorporated into system designs and data-sharing processes.

- Maintain security controls and standards during system sustainment and support revisions to data-transfer security requirements.

Requirements

- Extensive experience with Risk Management Framework (RMF) and ATO processes.

- Demonstrated expertise implementing security controls, conducting risk assessments, and performing vulnerability assessments.

- Knowledge of NIST, DoD, DIA, and Intelligence Community cybersecurity frameworks and policies.

- Experience securing intelligence systems, software applications, and data-management environments.

- Knowledge of cross-domain security architectures, system access controls, and secure data-sharing practices.

- Ability to work across technical and operational teams, translate security requirements into implementable controls, and balance security with mission needs.

- Strong analytical skills, attention to detail, and current awareness of evolving cyber threats and security technologies.

Preferred qualifications

- Relevant cybersecurity certification, such as CISSP, CAP, or CISM.

- Experience supporting CI/HUMINT systems, secure software development, and cross-domain data-transfer solutions.

- Experience working with DIA security certification and accreditation processes.