Are you ready for a better career?
Information Systems Security Engineer (ISSE)
- Annapolis Junction, MD (with potential work at Joint Base Anacostia-Bolling (JBAB) or Landover, MD)
- Full-Time
- Position Id: 94
- Clearance Required: Current/Active TS/SCI
- Work Schedule: Onsite – 5 Days/Week
- Period of Performance: 01/08/2024 – 08/30/2027
Overview
The Information Systems Security Engineering (ISSE) will collaborate on design efforts, provide security engineering, and lead the engineering of RMF BOE artifacts of a large-scale enterprise Information Technology (IT) program.
Responsibilities
- Provide ISSE expertise for all assigned engineering tasks and projects
- Provide guidance describing the system and its functions, information types, operating environments, and security requirements
- Review the adequacy of the security controls and their ability to protect the information system and its information; assist in tailoring security controls, as appropriate
- Assist in determining the assurance measures that can be used to meet assurance requirements
- Integrate ISSE team members into all Scrum and project teams to provide for all requisite RMF security related support
- Work collaboratively with Systems, Network, and other engineers throughout the service design lifecycle to design and implement security controls, and best practices such as Zero Trust Architecture, including engineering of assigned RMF BoE documentation.
- Conduct Assessment and Accreditation (A&A) activities, following security processes and coordinating with the Designated Authorizing Official (DAO) representatives and appropriate security teams.
- Create and update assigned RMF documentation and artifacts for each service, as required
Qualifications
- IAM Level III certification required
- Proven experience performing security engineering across enterprise systems and networks.
- Proven experience performing Systems Security tasks including: Security Information and Event Monitoring (Splunk); Endpoint security (HBSS); password and credential management (CyberArk); Compliance and vulnerability scanning (ACAS / Nessus); and Code Scanning (Fortify).
- Proven experience performing Network Security for Firewalls, Intrusion Detection Systems (IDS)/ Intrusion Prevention Systems (IPS)
- Proven experience with Cisco products (Cisco Security Manager, Cisco FireSight Management Center, Cisco Firewall Service Modules (FWSM), Cisco IPS/IDS modules, Cisco Firepower IDS/IPS, Advance Malware Protection (AMP) services, Cisco Identity Services Engine (ISE) services, etc.
- Familiar with RMF and DoDAF 2.0 processes and standards
- Familiar with Scrum methodologies
Desired Qualifications
- ITILv4 Foundation Certification