Information Systems Security Engineer

JOB DESCRIPTION: We are currently seeking a Information Systems Security Engineer (ISSE) to support our customer. This position will work closely with network and systems engineers to integrate cybersecurity into the design, development, testing, hardening, accreditation, and deployment of secure enterprise capabilities., * Work directly with network and systems engineers to evaluate system designs, configurations, and technical solutions for compliance with DoW cybersecurity requirements.

• Analyze and remediate STIG, IAVA, ACAS/Nessus, and other vulnerability findings for network, server, virtualization, and security infrastructure in development and test environments.
• Develop technically viable remediation approaches, validate corrective actions, document residual risk, and support POA&M development when findings cannot be immediately resolved.
• Support Risk Management Framework (RMF) and Assessment & Authorization (A&A) activities, including development and maintenance of security controls, evidence, POA&Ms, and other ATO package artifacts.
• Maintain cybersecurity information and authorization artifacts in eMASS and ensure system changes, findings, mitigations, and supporting evidence are accurately documented.
• Assess and validate security configurations and hardened baselines in lab environments prior to production deployment and support cybersecurity activities throughout testing, implementation, and sustainment.
• Participate in technical reviews, Cybersecurity Working Groups, and engineering activities to identify security risks early and ensure cybersecurity requirements are incorporated throughout the system lifecycle.

• 7+ years of combined IT, systems engineering, information assurance, or cybersecurity experience, including 4+ years supporting cybersecurity engineering, RMF, or A&A activities.
• Hands-on experience analyzing and remediating STIG and ACAS/Nessus vulnerability findings.
• Experience applying cybersecurity requirements to Windows, Linux, network, virtualization, or security infrastructure.
• Working knowledge of DoW Risk Management Framework (RMF), A&A processes, security controls, POA&Ms, and ATO documentation.
• Experience using eMASS to maintain security controls, findings, evidence, and authorization artifacts.
• DoW 8570/8140-compliant cybersecurity certification, such as Security+ CE or higher.

PREFERRED SKILLS:

• Previous Information Systems Security Engineer (ISSE) or cybersecurity engineering experience supporting DoW environments.
• Experience working directly with network and systems engineers to develop secure technical solutions and remediate cybersecurity findings.
• Knowledge of enterprise networking and security technologies such as Cisco, Juniper, Palo Alto Networks, F5, firewalls, and web proxy solutions.
• Experience with Windows Server, Red Hat Enterprise Linux (RHEL), VMware, Active Directory, or other enterprise infrastructure technologies.
• Experience supporting system accreditation and ATO package development from development and test through production deployment.
• Advanced DoW 8570/8140 cybersecurity certification such as CASP+, CISSP, or equivalent.

• Salary: $110,000-130,000/year (flexible based on experience)
• Major medical, dental and vision
• Paid holidays
• Paid Time Off (PTO)
• 401k and company matching

Soliel LLC is an innovative, growing engineering company specializing in providing Cybersecurity, Agile Software Development, Data Management and Analysis, Cloud Engineering and Services, DevSecOps, and Systems Engineering services to the Department of Defense and other federal agencies. Over the years, Soliel’s team of technical experts has consistently delivered outstanding innovative solutions and services that meet or exceed customer expectations and satisfaction.