SR Computer Scientist - Information System Security Engineer (ISSE)

The Senior Computer Scientist (ISSE) is the primary cybersecurity authority for tools and CI/HUMINT data-management systems, ensuring security is designed, implemented, assessed, and sustained throughout the system lifecycle.

Position level and location: Senior, one base full-time equivalent; on-site in Reston, Virginia. The position supports a 40-hour workweek, with schedules subject to mission requirements.

Role summary

The ISSE protects software, prototypes, data flows, and operational tools by embedding security controls into system design and development. The role partners with Software Engineers, Data Scientists, Data Management Tool Administrators, the Technology Project Manager, DIA CIO, and the Foreign Disclosure Officer to balance operational needs with DIA, DoD, NIST, and Intelligence Community security requirements.

Key responsibilities

- Ensure UMM tools and data-management systems comply with DIA security requirements and applicable federal security standards.

- Integrate security controls into software design, development, deployment, and sustainment activities.

- Conduct security assessments, risk analyses, vulnerability assessments, and continuous compliance monitoring.

- Support Authority to Operate (ATO) activities, including required security documentation and certification/accreditation coordination.

- Implement security controls in accordance with NIST and DoD standards and applicable DIA frameworks.

- Define and coordinate security requirements for cross-domain data transfers with Service and Combatant Command tool administrators.

- Support secure data-sharing and system-access requirements.

- Coordinate with DIA CIO on security certification, accreditation, and security-update activities.

- Advise the Technology Project Manager on security requirements and support Software Engineers in applying secure coding practices.

- Ensure foreign-disclosure requirements and controls are incorporated into system designs and data-sharing processes.

- Maintain security controls and standards during system sustainment and support revisions to data-transfer security requirements.