Information System Security Engineer

• Perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies.
• Apply knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments.
• Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations.
• Review certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content.
• Support security authorization activities in compliance with Information System Certification and Accreditation Process (ICD 503), the NIST Risk Management Framework (RMF) process, and prescribed ICs business processes for security engineering.
• Assist architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of government security policy and enterprise solutions.
• Occasional travel, 25% CONUS

• Bachelor’s Degree and 4 years of relevant experience, or high school diploma/GED and 9 years of relevant experience
• Familiarity with information system security principles.
• Experience with interfacing and briefing military, civilian, and contractor personnel at all levels.
• Knowledge of security-related IC and DoD policies, procedures and operating instructions.
• Experience in applying system security engineering expertise in one or more of the following: system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification, authentication, and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing.
• One of the following certifications required Information Assurance Management (IAM) Level I: CAP, GSLC, CISM, CASP, CISSP, CCISCO, Security+.

Preferred Qualifications:

• Experience in supporting the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
• Experience in supporting the building of security architectures and enforcing the design and implementation of trusted relations among external systems and architectures.
• Experience as a primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of secure networking, computing, and enclave environments.
• Experience in assessing and mitigating system security threats/risks throughout the program life cycle.
• Experience with Trellix ePolicy Orchestrator
• Experience Tenable Security Center
• Experience with Splunk

Security Clearance Requirement:

• Active/current TS/SCI with Polygraph is required.

Physical Requirements:

• Must be able to be in a stationary position more than 50% of the time
• Must be able to communicate, converse, and exchange information with peers and senior personnel
• Constantly operates a computer and other office equipment