As a Risk Management Framework (RMF) Information Systems Security Engineer (ISSE)/ Information Systems Security Officer (ISSO), you will be responsible for overseeing the security posture of complex information systems, ensuring compliance with the Risk Management Framework (RMF).

Responsibilities

Your day-to-day activities will involve conducting thorough risk assessments, performing security testing, and analyzing security controls to identify and mitigate vulnerabilities.

• You will be tasked with developing and maintaining critical documentation such as System Security Plans (SSP), Plans of Action and Milestones (POA&M), Security Control Traceability Matrices (SCTM), Risk Assessment Reports, Concepts of Operations (CONOPS), and Security Control Assessment Plans.
• Your role will also require you to monitor systems for security events, conduct regular audits, and provide recommendations for secure system architecture.
• To excel in this position, you should have hands-on experience with host and network access controls, incident response and handling methodologies, as well as a deep understanding of network protocols and the latest system and application security threats.
• Familiarity with tools and processes related to system monitoring, vulnerability management, and security auditing will be highly beneficial.
• Strong communication skills are essential, as you will be expected to clearly articulate security risks and recommendations to both technical and non-technical stakeholders.
• Holding one of the advanced 8140 certifications—such as CISSP, CISM, CCISO, CySA+, GSLC, GSNA, ISSEP, or CISA—is a requirement, ensuring you bring a high level of expertise and leadership to the security team.

Here is what you need

• Experience with risk assessment and conducting security testing
• Hands-on experience applying the Risk Management Framework (RMF)
• Familiarity with incident response and handling methodologies
• Awareness of system and application security threats and vulnerabilities
• Experience developing and maintaining security documentation, including any of these:
  • System Security Plans (SSP)
  • Plan of Actions and Milestones (POA&M)
  • Security Control Traceability Matrix (SCTM)
  • Risk Assessment Reports
  • Concept of Operations (CONOPS)
  • Security Control Assessment Plans
• Requires one of the following 8140 Advanced certifications;
  • Certified Chief Information Security Officer (CCISO)
  • Certified Information Security Manager (CISM)
  • Certified Information Systems Auditor (CISA)
  • Certified Information Systems Security Professional (CISSP)
  • CompTIA Cybersecurity Analyst (CySA+)
  • GIAC Security Leadership Certification (GSLC)
  • GIAC Systems and Network Auditor (GSNA)
  • Information Systems Security Engineering Professional (ISSEP)

Nice to have

• Knowledge of network protocols
• Knowledge of secure system architecture and system monitoring
• Strong security control analysis skills
• Experience conducting system audits
• Understanding of host and network access controls

Clearance

• An active TS/SCI is required

We are seeking a highly skilled AI/ML Engineer to join our team and support our client in the Annapolis Junction, MD area.

This role focuses on developing and deploying AI/ML solutions while ensuring secure, scalable, and efficient operations through automation, containerization, and cloud-native strategies. The ideal candidate is a fast learner with a passion for innovation and adaptability.

What you’ll be doing:

• Develop and deploy AI/ML models, including deep learning, LLM fine-tuning, and retrieval-augmented generation (RAG)
• Build and manage containerized applications using Docker and Kubernetes (K8s)
• Automate CI/CD pipelines for secure and efficient delivery
• Leverage AWS services like Bedrock, SageMaker, and general cloud architecture for scalable deployments
• Build secure Linux-based systems and applications, including web apps (Flask/Django) and databases (e.g., graph databases)

What you’ll need:

• Experience in Python and Linux environments
• Experience with Docker, Kubernetes, and/or CI/CD pipelines
• Experience with and knowledge of AI/ML principles, including model development and evaluation
• Familiarity with web app development and database management

Bonus points if you have:

• Experience with NVIDIA NIMs, NeMo, and agentic AI frameworks (AutoGen, CrewAI, LangGraph)
• Knowledge of AWS cloud services
• Knowledge of advanced DevSecOps tools for security and vulnerability assessments
• Exposure to API integrations and prompt engineering

Security Clearance:

• Must have an active TS/SCI with polygraph level clearance