BTI360, in Herndon, Virginia, is seeking a highly skilled and technically proficient Security Engineer (ISSE) with TS/SCI clearance and polygraph to join our exceptional team. As a Security Engineer, you will play a crucial role in maintaining the highest standards of operational security across our systems, while leveraging your extensive technical expertise. Working closely with the Information System Security Manager (ISSM), development teams, and customer POCs, you will ensure strict compliance with security controls and regulations.

ABOUT US

Here at BTI360, we've built a culture that's passionate about developing software engineers. Software doesn't build itself. People do. In fact, teams of people do. That's why our primary focus is on developing better craftsmen, better teammates, and better technical leaders. By putting people first, we're not just giving our teammates more opportunities to grow, we're also raising the bar of the software we ship. BTI360 was voted 10 years in a row as a TOP Place to Work by the Washington Business Journal.

Responsibilities:

• Collaborate with stakeholders to draft, implement, review, manage, and document system security controls across the Risk Management Framework (RMF) lifecycle.
• Work with internal teams and cross-functional stakeholders to develop achievable Plans of Actions & Milestones (POA&Ms) to address and remediate system risk.
• Monitor and guide POA&Ms to closure.
• Conduct periodic reviews of information systems to ensure compliance with client security requirements and recommend possible security enhancements.
• Serve as a focal point for developer teams and external stakeholders or security questions.
• Maintain a working knowledge of Linux and Microsoft administration security best practices.
• Coordinate with security and development teams to identify, report, and mitigate vulnerabilities.
• Oversee security architecture across a variety of applications or domains, including cloud computing and hybrid environments, assigned to project/initiatives of large size, complexity, and risk.
• Advise Stakeholders on security best practices and provide clarification on security policies and regulations
• Develop actionable security blueprints, principles, models, designs, standards, and guidelines to ensure enterprise IT architecture and support is consistent, usable, secure and adds value to the business.
• Stays up-to-date with current information security trends and industry best practices.
• Participates in technical, business process, and status review meetings.

• Must have a TS/SCI clearance with Polygraph
• Bachelor's degree in computer science, cyber security, engineering, Information Systems, or a related technical field. (Master's Degree preferred).
• Hands-on experience securing cloud-hosted workloads on major cloud service providers (AWS, Azure, GCP, etc.)
• Hands-on experience conducting system vulnerability scanning for complex systems.
• Experience hardening applications and software delivery pipelines

• Previous working experience in either: software development, systems administration, system engineering, network administration, or IT audit (Big 4).
• Experience supporting agile software development teams.
• Experience automating security controls with Bash, Python, Go, Powershell or other languages.
• Experience securing serverless and Kubernetes workloads.
• Experience building and maintaining SecDevOps pipelines.
• Experience identifying, planning, and implementing new cybersecurity enhancements for multiple teams.
• Experience automating compliance and security scanning.
• Working knowledge of Git.
• Advanced level certifications: CISA, CISSP, CISM, GCIH, CCSP, CASP+ CE, professional level cloud vendor certification.

• Fully paid healthcare premiums

• Competitive salaries with Performance Bonuses

• Career Development and In-house training

• Continuing Education: Annual Reimbursement Towards Education and Training

• 5 Weeks of PTO plus 10 Federal Holidays

• 401K Dollar for Dollar Matching up to 6% Annually - Vested immediately on day 1

• Giving Back: Serving communities locally and across the globe

• Social Events (i.e.: Happy Hours, Golf Tournament, Family Festival)