Cybersecurity Engineer with Security Clearance

Job Description DeMase Technical Services is a Women-Owned Small Business created by experts in the cybersecurity, energy, nuclear, and defense markets. We offer best-in-class solutions for nuclear facility licensing, permitting, startup, operations, cybersecurity, and next generation technologies. DeMase provides expert professionals in the fields of cybersecurity, next generation information technologies, nuclear engineering, nuclear technologies, and environmental management.

Our cybersecurity team is an industry leader supporting the Cybersecurity Maturity Model Certification (CMMC) ecosystem. DeMase is an expert authorized CMMC C3PAO and full-service CMMC provider for readiness and certification. The Information System Security Engineer (ISSE) will support cybersecurity engineering, design, assessment, and compliance efforts for both DOE classified systems and Controlled Unclassified Information (CUI) environments.

The ISSE ensures information systems are architected, implemented, and maintained in alignment with DOE directives, NIST frameworks, and organizational cybersecurity requirements. This role collaborates with engineering, cybersecurity, operations, and program leadership to maintain secure, compliant, and resilient information systems. This role requires the ability to obtain an active DOE Q security clearance (or equivalent DoD TS).

• Develops and maintains system security architectures for DOE classified and CUI systems;
• Integrates security controls into system design, development, and implementation activities across the system lifecycle;
• Produces and maintains RMF authorization documentation, including SSPs, SPPs, RARs, SAP/SAR inputs, and associated artifacts;
• Performs risk assessments, vulnerability analysis, and technical security evaluations;
• Ensures system compliance with DOE O 205.1C, DOE O 471.6, DOE cybersecurity program guidance, NIST SP 800-53, and NIST SP 800-171;
• Works closely with ISSMs, ISSOs, system administrators, and network engineers to validate, implement, and assess security controls;
• Supports continuous monitoring activities, configuration management, change control, and POA&M lifecycle management;
• Assists with internal and external cybersecurity audits, inspections, and DOE assessments;
• Leads or supports technical troubleshooting of security-related issues affecting classified or CUI systems;
• Installs, configures, and maintains security-related tools such as SIEM platforms, vulnerability scanners, and monitoring solutions;
• Contributes to incident response activities in accordance with DOE reporting requirements; and
• Maintains awareness of evolving threats, security technologies, and updates to DOE and NIST requirements. Pay range: $105,000 - $165,000 depending on education and experience