Information Systems Security Engineer

• DoD 8570 compliance w/IASAE Level 3 required
• ISSEP Required
• CISSP Required, Our client’s mission is the implementation and fielding of the National Leadership Command Capability in support of Nuclear Command, Control, and Communications (NC3), Continuity of Government (COG), and Senior Leader communications., The successfully engineer on this project will have 20 years of experience as an Information System Security Engineer (ISSE). The successful candidate will perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies. Validate and verify system security requirements definitions and analysis and establishes system security designs. Designs, develops, implements and/or integrates IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements. Support the building of security architectures. Enforce the design and implementation of trusted relations among external systems and architectures. Assess and mitigate system security threats/risks throughout the program life cycle.

Apply system security engineering expertise in one or more of the following:

• system security design process;
• engineering life cycle;
• information domain;
• cross domain solutions;
• COTS and GOTS cryptography;
• Identification, authentication, and authorization;
• system integration;
• risk management;
• intrusion detection;
• contingency planning;
• incident handling;
• configuration control and change management;
• auditing;
• certification and accreditation processes

• 20 years of experience as an Information System Security Engineer
• Versed in principles of IA including confidentiality, integrity, non-repudiation, availability, and access control
• Experience supporting security authorization activities in compliance with:
• NSA/CSS Information System Certification and Accreditation Process (NISCAP)
• DoD Risk Management Framework (RMF)
• NIST Risk Management Framework (RMF)
• NSA/CSS business processes for security engineering.
• Experience interacting directly with customer and other project team members
• Experience generating system level solutions to resolve security requirements
• Experience developing functional and secure system architectural design plans, * Bachelor’s Degree in Computer Science, Information Assurance or Information Security System Engineering required
• Master’s Degree Computer Science, Information Assurance or Information Security System Engineering may be substituted for two (2) years of experience
• Four (4) years of additional ISSE experience may be substituted for a Bachelor’s degree