Information Security Engineer Jobs in District of Columbia
Information Security Engineer jobs in District of Columbia are concentrated in Washington DC and its immediate suburbs, where federal agencies, defense contractors, and major consulting firms like Booz Allen Hamilton, Leidos, and Northrop Grumman maintain large security operations and continuously recruit at every level. The market is among the most active in the country, driven by the concentration of government and intelligence-sector work, with the strongest demand in cloud security, security operations center analysis, and compliance-focused roles tied to federal frameworks like NIST and FedRAMP. Openings range from associate-level positions to senior architects and team leads. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Showing 5 of 74+ Information Security Engineer jobs
Tharros is seeking a Senior Information Systems Security Officer to support a DHS Intelligence and Analysis cybersecurity program in the National Capital Region.
This role will support ISSO operations across a complex Federal cybersecurity environment, including Assessment and Authorization, continuous monitoring, ATO package maintenance, POA&M management, security artifact quality, cloud and hybrid system support, and cybersecurity compliance. The ideal candidate is a hands-on ISSO who can maintain accurate authorization evidence, coordinate with technical teams, and help keep mission systems secure, compliant, and authorization-ready.
Responsibilities:
- Perform ISSO duties for assigned Federal information systems.
- Support RMF activities, including system categorization, control implementation support, assessment readiness, authorization package maintenance, and ongoing monitoring.
- Develop, review, validate, and maintain security artifacts such as SSPs, POA&Ms, risk exceptions, contingency plans, privileged user documentation, and privacy-related artifacts.
- Create, maintain, and monitor ATO packages in GRC tools.
- Support POA&M development, validation, remediation tracking, exception documentation, closure, and reporting.
- Collaborate with system owners, ISSOs, ISSMs, developers, engineers, assessors, and other stakeholders to address vulnerabilities, security findings, and remediation actions.
- Review vulnerability scan results and support recurring continuous monitoring activities.
- Support audit log review, alert response, and documentation of follow-up actions.
- Ensure assigned systems remain aligned with applicable cybersecurity policies, procedures, and decommissioning requirements.
- Support quarterly cybersecurity performance and compliance reporting.
- Provide ISSO support across hybrid environments, including classified and unclassified on-premise systems, cloud-based systems, DevSecOps environments, and agile development teams.
- Support security for operating systems and technologies including Linux, Windows, open-source operating systems, and cloud platforms.
- Support Cross Domain Solution security governance, assessment, and authorization activities.
- Help improve ISSO workflows, evidence management, POA&M tracking, continuous monitoring, and risk reporting through automation and repeatable processes.
- Translate compliance status, vulnerability data, and remediation progress into clear updates for technical and leadership stakeholders.
Requirements:
- Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
- 10+ years of related cybersecurity experience.
- At least 2 years of recent experience in A&A, FISMA compliance, IC cybersecurity policy and standards, continuous monitoring, CDS, and secure cloud and hybrid engineering.
- Experience applying NIST 800 series, CNSSI 1253, security controls, and RMF principles.
- Experience with emerging security risk management practices, including automation of A&A and continuous monitoring activities.
- CISM, CAP, or GRC certification, or comparable demonstrable experience.
- Experience developing, reviewing, or maintaining SSPs, POA&Ms, risk exceptions, contingency plans, privileged user documentation, ATO packages, and continuous monitoring evidence.
- Experience working with GRC tools and coordinating with technical teams to remediate vulnerabilities and maintain authorization readiness.
- Strong written and verbal communication skills.
- Ability to work onsite at a Government-approved location as required.
Preferred Qualifications:
- Prior DHS, Intelligence Community, DoD, CISO office, ISSM, AO, SCA, or national security ISSO experience.
- Experience supporting large ISSO portfolios, classified systems, hybrid cloud environments, DevSecOps evidence collection, continuous monitoring, and audit readiness.
- Experience with Archer, eMASS, Xacta, ACAS, Tenable.sc, Splunk, GitLab, Axonius, STIG/SCAP validation, or related Federal cybersecurity tools.
- Experience with AWS, Microsoft Azure, Microsoft 365, or other cloud platforms.
- Experience supporting TS/SCI, SCIF, cross-domain, or secure mission environments.
See All 74 Information Security Engineer Jobs in District of Columbia
Find roles in District of Columbia that match your experience and apply in just a few clicks.
Find JobsInformation Security Engineer Jobs by City in District of Columbia
Where District of Columbia roles are concentrated, by current openings.
Information Security Engineer Job Market in District of Columbia
A snapshot from current District of Columbia openings, updated as new roles post.
Who's Hiring
What District of Columbia Employers Look For
The qualifications that appear most often in information security engineer jobs across District of Columbia.
- Active security clearance, or eligibility to obtain one, often required
- Bachelor's degree in computer science, cybersecurity, information systems, or related field
- Certifications such as CISSP, CEH, CompTIA Security+, or equivalent strongly preferred
- Hands-on experience with SIEM tools, intrusion detection, and vulnerability management platforms
- Familiarity with federal compliance frameworks including NIST, RMF, FedRAMP, or FISMA
- Proficiency in scripting or programming languages such as Python, PowerShell, or Bash
Information Security Engineer Jobs in District of Columbia: Frequently Asked Questions
How do you become a information security engineer in District of Columbia?
Information security engineering in DC does not require a state-issued license, but the market strongly favors candidates who hold a bachelor's degree in cybersecurity, computer science, or a related field alongside recognized certifications like CISSP, Security+, or CISM. The federal and defense focus of DC employers means obtaining or being eligible for a security clearance is often the most decisive qualification, and many candidates begin that process through entry-level contractor or government IT roles.
How much do information security engineers make in District of Columbia?
Information security engineers in District of Columbia earn a median of about $135,090 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $86,280 for the lowest 10% to over $189,510 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire information security engineers in District of Columbia?
District of Columbia information security engineer roles are posted by tharros, MANTECH, and Peraton and others right now, based on current listings on Migrate Mate as of November 2026. DC's concentration of federal agencies, intelligence community contractors, and large systems integrators makes it one of the most consistently active hiring markets for this role in the country.
Which District of Columbia cities have the most information security engineer jobs?
Washington, Bolling AFB, and Pentagon account for the most information security engineer openings in District of Columbia. Washington DC anchors the market as the home of federal agencies and their prime contractors, while nearby areas like Arlington and Bethesda carry significant volume due to the headquarters of major defense and consulting firms with long-term government contracts.
Are there remote information security engineer jobs in District of Columbia?
Yes, and more than many technical roles. About 45% of information security engineer openings tied to District of Columbia are remote or hybrid as of November 2026, though positions requiring access to classified systems or sensitive federal networks are typically on-site or restricted to specific cleared facilities. Cloud security, risk assessment, and compliance-focused roles tend to offer the most remote flexibility.
How can I get hired as a information security engineer in District of Columbia with little or no experience?
The most realistic entry path in DC is through a junior IT security analyst or SOC analyst role with a federal contractor, where firms like Booz Allen Hamilton, SAIC, and ManTech regularly hire early-career candidates and support the clearance process. A Security+ certification combined with any hands-on lab experience, such as a capstone project or a home lab, gives a candidate a measurable edge, and programs at DC-area universities like George Mason and George Washington often have direct relationships with government contractors for internships and new-grad placements.
Where can I find and apply to information security engineer jobs in District of Columbia?
You can find and apply to information security engineer jobs in District of Columbia on Migrate Mate, which lists current openings in the area. Search the available roles, identify the ones that match your background and clearance level, and apply directly to the ones that fit.
See All 74 Information Security Engineer Jobs in District of Columbia
Find roles in District of Columbia that match your experience and apply in just a few clicks.
Find Jobs