Information System Security Engineer (ISSE) Tier 3

POSITION OVERVIEW

Intrinsic Resolution, LLC (IR) is seeking a seasoned Information System Security Engineer (ISSE) — Tier 3 to support in a critical cybersecurity role at the U.S. Department of Energy (DOE) / National Nuclear Security Administration (NNSA) in Washington, DC.

This high-impact position requires a technical expert capable of conducting advanced cyber engineering activities, supporting multi-disciplinary teams, and delivering cybersecurity expertise across domestic and international partner engagements in support of NNSA’s Defense Nuclear Nonproliferation (DNN) mission.

ROLES & RESPONSIBILITIES

• Conduct cyber engineering activities utilizing advanced tool sets in support of NNSA mission objectives.
• Provide solutions to complex problems requiring analysis and innovative methods, collaborating with subject matter experts and program managers across critical infrastructure, industrial control system (ICS) cybersecurity, and information security disciplines.
• Develop and deliver cybersecurity training to domestic and international partners.
• Provide cybersecurity expertise as part of multi-disciplinary, multi-lab teams conducting facility assessments and consulting to DOE/NNSA’s DNN.
• Develop software and technological solutions in support of GMS missions.
• Engage cybersecurity experts regularly to share relevant knowledge, recommendations, and fulfill deliverables collaboratively.
• Design technical solutions independently and as part of a multidisciplinary team; analyze sponsor requirements, implement software, and perform analyses to address requirements.
• Manage multiple parallel tasks and competing priorities across customers and stakeholders to ensure deadlines are met.
• Assist architects and system developers in the identification and implementation of appropriate information security functionality, ensuring uniform application of agency security policy and enterprise solutions.
• Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.

REQUIRED TECHNICAL SKILLS & EXPERIENCE

• 5+ years of experience in cybersecurity engineering or a closely related technical discipline.
• Demonstrated hands-on experience with Splunk, RSA, Tenable Nessus, and SELinux.
• Strong, demonstrated understanding of ports, protocols, and services.
• Working experience in Microsoft and Linux environments.
• Experience with vulnerability Management and Vulnerability Management Tools
• Network Enterprise Experience.
• Familiarity with Ansible, Tenable, and SIMS/Sentris platforms.

PREFERRED QUALIFICATIONS

• Familiarity with SentinelOne endpoint detection and response (EDR).
• Familiarity with Intrusion Detection/Prevention Solutions (IDS/IPS).
• Familiarity with Microsoft Endpoint Configuration Manager (MECM).

EDUCATION

A formal degree is not required. Relevant years of experience and demonstrated technical capability are weighted more heavily than academic credentials. Industry certifications (CISSP, CEH, Security+, or equivalent) are a plus.

NON-NEGOTIABLE REQUIREMENTS

• Active Top Secret clearance with a current investigation (within the last 5 years) — mandatory prerequisite.
• On-site presence required at the Washington, DC facility — no remote or hybrid options available.
• New hire start dates are strictly the 1st and 16th of each month.
• On-call support is required; surge support outside normal business hours (EST) will be coordinated in advance whenever possible.
• Normal shift: Monday – Friday, EST; start/end times may vary based on commute and seating availability in secure spaces.

IMPORTANT NOTICE — 10 CFR PART 709 & PRE-EMPLOYMENT SCREENING

Pre-Employment Drug Testing & Background Investigation: Prospective applicants are hereby notified that reviews and tests for the absence of any illegal drug, as defined in 10 CFR 707.4, will be conducted by the employer. A background investigation by the Federal Government may be required to obtain an access authorization prior to employment, and subsequent reinvestigations may be required.

Counterintelligence Evaluation Program (10 CFR Part 709)

This position is covered by the Counterintelligence Evaluation Program regulations at 10 CFR Part 709. Applicants are advised that successful completion of a counterintelligence evaluation may include a counterintelligence-scope polygraph examination.

EQUAL OPPORTUNITY & COMPLIANCE NOTICES

This position and all hiring decisions will be made without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

As a federal contractor, Intrinsic Resolution, LLC complies with Section 503 of the Rehabilitation Act and VEVRAA. No disability-related inquiries will be made prior to a conditional offer of employment, except as permitted by applicable law.

Employee Rights Under the National Labor Relations Act (NLRA)

As a federal contractor, the Company complies with Executive Order 13496 and informs employees of their rights under the National Labor Relations Act. Information regarding these rights is available at the workplace and from the National Labor Relations Board.

This position is covered by the Service Contract Labor Standards (SCLS). Compensation and fringe benefits will be provided in accordance with the applicable U.S. Department of Labor wage determination and any applicable collective bargaining agreement.

Pay: $165,000.00 - $173,388.00 per year

Benefits:

• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Application Question(s):

• Which of the following tools have you used hands-on in a production environment? (Select all that apply.)

Type: Multiple choice, multi-select · Options: Splunk / RSA / Tenable Nessus / SELinux / Ansible / GEMS / SIMS/Sentris / None of these

• Rate your experience with vulnerability management, from scanning through remediation tracking.

Type

Multiple choice · Options: Expert, I’ve led the program / Advanced, I run it day to day / Some exposure / None

• Which operating environments have you secured or administered professionally? (Select all that apply.)

Type: Multi-select · Options: Windows Server/AD / RHEL or other enterprise Linux / Both / Neither

• Do you have experience with any of the following? (Select all that apply.)

Type: Multi-select · Options: SentinelOne EDR / IDS/IPS solutions / Microsoft Endpoint Configuration Manager (MECM/SCCM) / ICS/SCADA or critical-infrastructure security / None of these

• Which certifications do you currently hold? (Select all that apply.)

Type: Multi-select · Options: CISSP / CEH / Security+ / CASP+ / GIAC (any) / None

• Have you developed or delivered cybersecurity training to customers, partners, or international audiences? If yes, briefly describe it.
• Briefly describe a time you used Splunk or Tenable to identify and resolve a security issue in an enterprise network.

Experience:

• Cybersecurity: 5 years (Required)

Security clearance:

• Top Secret (Required)

Ability to Commute:

• Washington, DC 20585 (Required)

Work Location: In person