Information Systems Security Engineer; ISSE Colorado Springs

Position: Information Systems Security Engineer (ISSE) Colorado Springs, CO

Information Systems Security Engineer (ISSE)

Full‑Time | On‑Site

Security Clearance: Top‑Secret or TSI/SCI clearance preferred

ABOUT EXOANALYTIC SOLUTIONS

Exo Analytic Solutions is a defense technology company developing cutting‑edge sensor signal processing, algorithms, modeling, simulation, and analytics tools to support mission‑critical defense and space systems. Our software and sensor technologies enhance the missile and space defense domains and enable faster, data‑driven decision‑making for national defense.

As an employee‑owned company, we combine deep technical expertise with a culture of innovation, autonomy, and shared success. Our engineers work on solving problems of global importance.

ABOUT THE ROLE

Exo Analytic Solutions develops advanced algorithms, AI/ML solutions, and software tools for modeling, simulation, sensing, and decision support across space and missile defense systems. We are a recognized leader in algorithm development and applied artificial intelligence, delivering technically rigorous solutions to problems of national importance.

Exo Analytic Solutions is seeking an Information Systems Security Engineer (ISSE) to join a multidisciplinary team and be primarily responsible for conducting information system security engineering activities, with a focus on the full lifecycle of current systems and future requirements development. The ISSE applies best practices when implementing security requirements within information systems, including software engineering methodologies, system and security engineering principles, secure design, secure architecture, and secure coding techniques.

This position primarily supports Special Access Programs (SAPs) for the Department of Defense (DoD) and Intelligence Community (IC).

KEY RESPONSIBILITIES

• Develops, documents, and implements cybersecurity architecture and security engineering solutions for classified systems.
• Ensures system design aligns with DoD architecture frameworks, DoDI 5000‑series systems engineering processes, and platform‑specific security policies.
• Applies security principles and technologies such as encryption, cross‑domain solutions (CDS), Zero Trust, and endpoint security to system designs.
• Supports all phases of the DoD RMF process, including:
• Categorize System
• Select & Implement Security Controls
• Assess Controls
• Authorize System
• Continuous Monitoring
• Develops RMF artifacts such as:
• System Security Plan (SSP)
• Security Controls Traceability Matrix (SCTM)
• Security Assessment Procedures
• POA&M entries and mitigation documentation
• Ensures compliance with DoDI 8510.01, JSIG, NIST SP 800‑37, NIST SP 800‑53, and CNSSI 1253.
• Participates in Integrated Product Teams (IPTs) to embed security into requirements, design reviews, test planning, and deployment strategies.
• Reviews engineering change proposals (ECPs) and configuration updates for security impacts.
• Supports software development teams in DoD Dev Sec Ops pipelines and secure coding practices.
• Performs or supports security assessments, DISA STIG reviews, and vulnerability scans (ACAS/Nessus).
• Works with Security Control Assessors (SCAs), Authorizing Officials (AOs), and Assessment & Authorization (A&A) teams during security evaluations.
• Reviews test results, mitigates vulnerabilities, and verifies closure of cybersecurity findings.
• Provides security engineering expertise to system architects, infrastructure teams, program managers, and mission owners.
• Develops and presents security briefings to leadership and accreditation authorities.
• Advises on emerging DoD cybersecurity directives, Zero Trust policies, and new STIG requirements.

MINIMUM QUALIFICATIONS

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related technical field, or equivalent practical experience
• Experience cybersecurity engineering, information assurance, or information system security engineering supporting DoD or IC programs'
• Hands‑on experience supporting DoD Risk Management Framework (RMF) activities across one or more system life cycles
• Strong problem‑solving, documentation, and communication skills
• U.S. citizenship required, with eligibility to obtain and maintain a Top‑Secret clearance.