Remote ISSE

Job Description - Develop, implement, and maintain security policies, procedures, and controls in alignment with USPS’s security requirements and federal standards (e.g., FISMA, NIST RMF).

• Utilize AI tools like GitHub Copilot to automate security tasks, vulnerability scans, and code reviews.
• Conduct regular security assessments, vulnerability scans, and penetration testing using tools such as Nessus, Splunk, and SonarQube.
• Implement and monitor security measures for sensitive data, ensuring compliance with encryption standards and access controls.
• Work with development and operations teams to integrate security practices within CI/CD pipelines and DevSecOps processes.
• Prepare and maintain security documentation, including System Security Plans (SSP), Risk Mitigation Plans (RMP), and Plan of Action and Milestones (POA&M).
• Ensure continuous monitoring and real-time security incident response using tools such as CloudWatch, GuardDuty, and AWS Security Hub.
• Collaborate with the USPS Chief Information Security Office (CISO) to ensure compliance with USPS’s security architecture and governance.

Provide security training and awareness programs to development and operational staff. The pay range for this position $55/hr - $60/hr Skills and Requirements - 8+ years of experience in information security engineering, with a strong focus on cloud security.

• Experience with AI tools, particularly GitHub Copilot, for security automation and vulnerability management.
• Strong understanding of federal security standards and compliance requirements (e.g., FISMA, NIST, FedRAMP).
• Proficiency in security tools and frameworks (e.g., Nessus, Splunk, NIST RMF).
• Excellent analytical, problem-solving, and communication skills.
• Able to manage multiple tasks effectively and meet deadlines.
• Ability to work collaboratively with developers, business analysts, and stakeholders.
• Security Certifications (e.g., CISSP, CISM, AWS Certified Security - Specialty).
• Experience in a USPS environment or similar federal IT projects.