IT Security Engineer III

Sure Secure is seeking a Senior-Level IT Security Engineer III to support cybersecurity operations at NASA’s Marshall Space Flight Center (MSFC). This position possesses in-depth technical knowledge of cybersecurity principles and, under general direction and in coordination with the CSPP, is responsible for cybersecurity procedures and systems, control guidelines, and Risk Management Framework (RMF) activities. No security clearance is required to start, though a Secret-level clearance (or the ability to obtain one) is needed for the role’s ongoing duties.

Roles and Responsibilities:

The IT Security Engineer III validates that system security controls are correctly implemented and remain effective throughout the system lifecycle, advising on technical solutions to complex problems requiring extensive expertise. The candidate will:

• Provide input to Risk Management Framework (RMF) process activities and related documentation, including system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials.
• Lead information system stakeholders in ensuring assessment readiness, effective continuous monitoring, and ongoing adherence to risk management activities, while providing technical oversight and cybersecurity consultation.
• Interpret patterns of noncompliance to determine impact on risk levels and overall effectiveness of the enterprise’s cybersecurity program.
• Perform security analysis of classified environments, threats, vulnerabilities, and internal interfaces to assess compliance with government standards and regulations.
• Advise senior management (Authorizing Officials, CIO, CISO) on cybersecurity risk levels and security posture.
• Develop methods to monitor and measure risk, compliance, and assurance efforts, ensuring selected security controls operate as intended across the system lifecycle.
• Coordinate with program security, cybersecurity management, and other stakeholders to clarify requirements and resolve issues while balancing mission needs against compliance mandates.

• Bachelor’s degree in information systems security, computer science, or a related field (or
• equivalent combination of education and experience).
• 8+ years of experience in information systems security and/or network operations/support.
• Solid understanding of IT security including network and host security products (intrusion detection systems, firewalls, VPNs, anti-virus/anti-spyware) and tools such as vulnerability scanners, wireless network scanners, and packet analyzers.
• Solid understanding of FISMA, NIST, and other guidance applicable to Federal information systems.
• Experience evaluating system, network, or infrastructure security controls against FISMA and NIST guidelines.
• Working knowledge of typical LAN/WAN technologies and protocols.
• Ability to possess an active security clearance or the ability to acquire one at the Secret level.

Desired/Preferred Skills:

• Experience with Nessus, BigFix, FireEye HX, and/or Splunk., This is a full-time Remote Role (Quarterly travel for a few days may be required)* A U.S. citizenship is required. All candidates must be able to pass a National Agency Clearance with Inquiries.