Information System Security Engineer (ISSE

Position: Information System Security Engineer (ISSE)
## Information System Security Engineer (ISSE)
Apply locations:
Lanham, Maryland time type:
Full time posted on:
Posted Todayjob requisition :
R2127412
*
* Title:

** Information System Security Engineer (ISSE)
*** Belong. Connect. Grow. with K !
*** K ’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.
** Why Join Us?**
* ** Innovative Projects:
** K ’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.
* ** Collaborative Environment:
** Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.
* ** Impactful Work:
** Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.
** Responsibilities:
*** Design, implement, and maintain enterprise security architecture aligned with NIST RMF, DoD STIGs, CIS benchmarks, and organizational cybersecurity policies
* Perform security engineering activities across system development lifecycle (SDLC), including requirements analysis, system design reviews, security testing, and accreditation support
* Implement vulnerability management processes utilizing Tenable Nessus, ACAS, and Qualys to identify, assess, and remediate system vulnerabilities
* Integrate cybersecurity requirements into Windows and Linux server environments, cloud infrastructure, virtualization platforms, and containerized applications
* Support incident response and forensic investigations by analyzing security logs, SIEM alerts, network traffic, and endpoint telemetry using Splunk Enterprise
* Develop automation scripts using Power Shell, Bash, and Python to streamline vulnerability remediation, account auditing, compliance reporting, and security monitoring tasks
* Collaborate with system administrators, network engineers, ISSOs, and application teams to remediate security findings and implement secure configuration baselines
* Perform security impact analysis for system changes, software deployments, and infrastructure upgrades to ensure continued compliance and operational security
* Engineer endpoint protection and hardening solutions utilizing Trellix ePO – On-prem, host-based firewalls, and application whitelisting technologies
* Evaluate and implement cybersecurity tools and technologies to improve system security posture, continuous monitoring, and threat detection capabilities
* Produce technical security documentation, architecture diagrams, standard operating procedures (SOPs), and executive-level risk assessment reports
* Experience administrating, configuring, and troubleshooting core modules such as Enterprise Password Vault (EPV), Password Vault Web Access (PVWA), Central Policy Manager (CPM), and Privileged Session Manager (PSM) in Cyber Ark
* Monitor, analyze, and detect cyber events and incidents within information systems and networks under general supervision
* Assist with integrated, dynamic cyber defense, coordinate and maintain security toolsets to support organizations’ continuous monitoring and ongoing authorization programs
* Establish a framework by which cyber risk can be measured and quantified in the marketplace
* Determine security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates
* Implement security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation. Verify security systems by developing and implementing test scripts
* Maintain security by monitoring and…