Information Systems Security Engineer

• Design, implement, and maintain security controls to protect information systems and data
• Conduct technical assessments to identify vulnerabilities and recommend remediation strategies
• Ensure compliance with industry standards and regulations
• Collaborate with cross-functional teams to implement security controls in AWS and other various cloud computing environments
• Ensure the environment is updated according to DoD standards and guidelines
• Follow approved DoD, STIG standards and DoD IAVA requirements; advise / make recommendations of needed updates to HBSS Lead
• Ensure that all systems are operating with valid licenses for all installed software
• Monitor and audit configurations to ensure that unintended changes do not occur
• Act as a trusted advisor to clients, understanding cybersecurity or data protection requirements and challenges
• Lead technical discussions, demonstrations, and presentations, effectively communicating the value proposition of our security solutions to both technical and non-technical stakeholders
• Continuous knowledge of industry trends and emerging threats in cyber security to continuously enhance our solutions and customer value
• Work collaboratively with team members, Information Assurance, Information Security Engineering, and other Subject Matter Experts to resolve security issues
• Solid understanding of cybersecurity principles, including, malware analysis, network security, and cloud security
• Solid understanding of security operations, networking, system administration and security architecture
• A clear understanding of cyber risks and the threat landscape related to cyber attacks
• Maintain thorough documentation of all activities and communications through ticketing systems, operational briefs, and status reports
• Support RMF lifecycle activities including system authorization and ATO efforts
• Ensure compliance with DoD, NIST, STIG, and IAVA requirements
• Develop and maintain System Security Plans (SSPs) and IA artifacts
• Validate security control implementation and effectiveness
• Coordinate with ISSOs, system owners, and auditors
• Track POA&M items and remediation status
• Advise stakeholders on compliance gaps and risk posture
• Implement and validate security controls in AWS and cloud environments
• Assess cloud configurations for risk and compliance alignment
• Support secure system migrations and modernization efforts
• Create scan policies, credential management, and endpoint/Nessus agent management on Tenable Nessus Manager
• Review and apply Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) requirements to servers and endpoints
• Perform eMASS or other GRC tools tasks, including system registration & boundary definition, document control implementation, and security control assessment support

Information Systems Security Engineering (ISSE), Information Systems Security Engineering (ISSE), Network Security, Malware Analysis, Internet Security, Incident Response, Hunting, Information Technology & Information Systems, Information/Data Security (InfoSec), Technical Analysis, We are seeking an experienced Information Systems Security Engineer (ISSE) to join our team in Arlington, VA. The ideal candidate will have a strong technical background in cybersecurity, with hands-on experience in assessments, incident response, threat hunting, threat intelligence, malware analysis, and network security., * Bachelor’s degree from accredited university

• Minimum 10 years of cybersecurity / information security experience
• Active DoD IAT Level II Certification (Security+, CySA+, SSCP, etc.)
• Active Computing Environment (CE) Certification (AWS, Azure, Linux+, VCP, etc.)
• Active DoD Secret Clearance (or eligibility)
• Strong experience with:

HBSS / endpoint security platforms

Vulnerability assessments

eMASS and GRC tools

Incident response / threat analysis

RMF / STIG / IAVA compliance