INFORMATION SYSTEMS SECURITY ENGINEER SKILLS, EXPERIENCE, AND JOB REQUIREMENTS
Published: Sep 17, 2025 - The Information Systems Security Engineer has experience supporting C4ISR systems with RMF package development and expert knowledge of DoD IA/Cybersecurity policies, RMF, and NIST SP 800-53. This role demands an active CompTIA Security+ certification, proficiency with tools such as eMASS, ACAS, STIGs, and SCAP, and advanced skills in cybersecurity, IT, and cloud/network architecture. In addition, the engineer needs strong communication and collaboration abilities to engage stakeholders and ensure system confidentiality, integrity, and availability.
Essential Hard and Soft Skills for a Standout Information Systems Security Engineer Resume
- Cybersecurity Engineering
- Risk Management
- Vulnerability Assessment
- Security Architecture
- RMF Compliance
- System Authorization
- Information Assurance
- Security Documentation
- Continuous Monitoring
- Access Control
- Stakeholder Collaboration
- Technical Leadership
- Communication Skills
- Problem Solving
- Team Collaboration
- Briefing Preparation
- Customer Interaction
- Project Management
- Stakeholder Coordination
- Security Training

Summary of Information Systems Security Engineer Knowledge and Qualifications on Resume
1. BS in Information Technology with 5 years of Experience
- In-depth knowledge and experience with installing, configuring, and securing SQL per DoD STIGs.
- Advanced CISCO networking experience.
- Must have in-depth knowledge of routing and switching, as well as configuring and hardening per DoD STIGs.
- In-depth knowledge and experience with all versions of Microsoft Windows, server, and client.
- Knowledge and experience in installing, configuring, and securing all aspects of VMWare.
- Knowledge and experience in evaluating proposed security architectures and designs against security compliance requirements.
- Basic understanding of information security principles and risk assessment techniques.
- Experience with using NESSUS and other scanning applications.
- Advanced communications skills, able to work well with others, independently, and as part of a team.
- Must be able to work well with others, including educating individuals who may not share the same level of understanding of IT and security.
2. BS in Network Engineering with 4 years of Experience
- DoD 8570.01-M IAT Level II certification (preferably Level III).
- Experience applying RMF security and program protection requirements across all phases of the SDLC.
- Knowledge of Layer 3 network architecture and ability to produce network diagrams using Visio, MagicDraw, or similar MBSE tools.
- Understanding of common information system threats and their impact on confidentiality, integrity, and availability.
- Familiarity with system testing, evaluation methods, and RMF assessment processes.
- Experience with DoD export control regulations.
- Proficiency with IBM DOORS or comparable requirements management tools.
- Ability to produce clear, authoritative security artifacts, plans, and reports.
- Proven skill in working across engineering, program management, and security teams.
- Capable of evaluating complex technical and security issues and proposing practical solutions.
3. BS in Computer Science with 7 years of Experience
- Strong technical background or prior System Administrator experience.
- Proven work experience in PMO Security, with IASAE level II certification (CASP+ CE, CISSP (or Associate), CSSLP.
- Application Security and Development experience ( OWASP/ ASD STIG).
- Strong knowledge of the Risk Management Framework NIST SP 800-53.
- Strong Knowledge of Agile methodology.
- Experience with Static and Dynamic software testing products.
- Experience with Microsoft Team Foundation Server and Application Lifecycle Management tools.
- Strong client-facing and teamwork skills.
- Excellent time management and organizational skills to set and meet deadlines.
- Excellent written and oral communication skills.
- Able to serve as SCRUM Master and facilitate Agile ceremonies.
4. BS in Computer Engineering with 6 years of Experience
- Cybersecurity/IA experience supporting C4ISR systems with direct RMF package development.
- Active CompTIA Security+ certification.
- Expert knowledge of DoD IA/Cybersecurity policies, RMF, and NIST SP 800-53.
- Advanced understanding of Cybersecurity, IT, Cloud/Network Architecture, and related concepts.
- Proficient with systems, networks, deployment environments (data center, cloud), and security threats/vulnerabilities.
- Skilled in DoD tools for vulnerability/compliance (eMASS, ACAS, STIGs, SRGs, SCAP).
- Experience in developing RMF artifacts, planning/executing security assessments, and reporting to IPTs, Program Offices, and external stakeholders.
- Background in program development/oversight, ensuring system confidentiality, integrity, and availability.
- Strong communicator with both technical and non-technical stakeholders.
- Effective collaborator across IPTs, contractors, and government to align on security requirements.
- Solid analytical abilities, with expertise in assessing emerging threats, balancing trade-offs, and providing actionable recommendations under pressure.
5. BS in Systems Engineering with 10 years of Experience
- Experience as an Information Systems Security Engineer (ISSE) or Network Engineer on programs and/or contracts with the customer space.
- Current CASP or CISSP certification.
- CISSP-ISSEP certification (DoD 8570 baseline, Level III)
- Strong technical writing skills with the ability to produce clear, concise, and comprehensive documentation.
- Excellent communication skills with the confidence to deliver briefings to senior-level DoD officials, both in formal presentations and ad hoc discussions.
- Expertise in network technology and systems security engineering.
- Experience in identifying, researching, characterizing, and documenting security weaknesses related to operating systems, software applications, firmware, network hardware components, as well as network architecture design and documented policies and procedures.
- Experience developing and documenting system security requirements and conducting requirements gap analysis.
- Knowledge of, and practical experience with the NIST Special Publications 800 Series, CNSSI 1253, and DoD 8500.
- Experience with network technologies and the ability to demonstrate knowledge of network protocols, communications systems, and architectures.
- Significant hands-on experience implementing security and/or network components, i.e., routers, firewalls, IPS, IDS, etc.
- Ability to work independently within a schedule and with little direction.