Cybersecurity Engineer / Information System Security Engineer (ISSE) – DoD Healthcare

Role overview

Support the security engineering and authorization of enterprise healthcare technology used in a defense environment. The role spans system design through operations, combining security documentation, control validation, vulnerability remediation, and coordination with government security staff, developers, administrators, and cloud engineers.

Responsibilities

- Maintain system authorization and Risk Management Framework documentation, including security plans, control narratives, diagrams, and supporting evidence. - Coordinate authorization activities with security officers, assessors, and program teams. - Review architectures, integrations, cloud configurations, and application designs to identify security requirements and compliance gaps. - Support implementation and validation of security controls, secure configurations, access controls, encryption, logging, and monitoring. - Coordinate security scans and vulnerability remediation; track findings and corrective actions through closure. - Assess security impacts of system changes and releases, support continuous monitoring, and communicate risks and remediation progress.

Requirements

- A relevant bachelor’s degree with 4–8 years of experience, or a relevant master’s degree with 2–6 years; equivalent experience may be considered. - At least three years in cybersecurity engineering, information assurance, system security, or security assessment and authorization. - Experience supporting DoD RMF processes and preparing or maintaining system authorization documentation. - Familiarity with security controls, cloud security principles, identity and access management, encryption, logging, and vulnerability management. - Strong analytical, documentation, communication, and collaboration skills; able to manage assignments independently and coordinate across technical and government teams. - Ability to meet applicable defense healthcare personnel suitability and cybersecurity workforce qualification requirements.

Nice to have

- Experience with authorization packages for federal healthcare systems or cloud-hosted and SaaS applications. - Familiarity with Salesforce government cloud services, AWS GovCloud, Amazon Connect, AWS identity and monitoring services, or defense cloud environments.