Information Systems Security Engineer
Role details
Job location
Tech stack
Job description
We are actively seeking an Information Systems Security Engineer (ISSE) with a minimum of 11 years' experience with a Bachelor's Degree. Other degrees will be considered with the year's experience adjusted to accommodate. We are looking for a candidate with specific skills that may include the following:
- Implementation and validation of security controls that support the Risk Management Framework (RMF) and ICD 503 Security Accreditation
- Developing architecture documentation and Systems Security Plans (SSP) to support Accreditation and Authorization (A&A) reviews
- POA&M development and implementation
- Coordinating with customer security organizations to achieve Authority to Operate (ATO).
- Knowledge of the complex environment involving shared networks and multiple security enclaves
- Engineering for Cyber engineering and integration services including security, authentication, identity management, authorization, and access control engineering.
Requirements
-
Self-starter able to work independently and build relationships with technical reps across divisions, comfortable with cyber security and able to brief issues to the customer
-
Over 5 years of experience working on Government Agency enterprise infrastructure and engineering programs. Preferred Education, Experience, & Skills:
-
Nessus / Rapid7
-
Security Development and Operations (SecDevOps)
-
Various security tools and processes such as Splunk, Nessus Security Center, WebInspect, Xacta
-
Cloud security controls and implementation
-
STIG compliance and vulnerability management
-
CISSP
-
AWS Certified Security Specialty
-
Microsoft Office365
-
Experience in one or more software products associated with cyber system engineering for data analytics including SQL security, TANIUM Endpoint Management Software, PowerShell, MacAfee, App Blocker, Splunk ITSI.
-
Experience with one or more software development environments supporting commercial or open-source tools including but not limited to: Linux, Python, C, Bash Scripting, Perl, SQL, Splunk Phantom, UBA, and UIPath
-
Experience in one or more cloud computing services and technologies including but not limited to: AWS/C2S, Microsoft Azure, Nutanix, VMware.