Information Systems Security Engineer

Fusion Innovation's recent growth has earned us a top spot in the Inc 5000 Fastest Growing Private Companies in America and in Washington Business Journal's Best Places to Work multiple years in a row. Our team members are passionate about their work and are empowered to contribute their unique skills and perspectives to our projects. Here at Fusion, we put people first. When you join us, youdon't just join a company, you join a family.

If you are ready to be part of afun and engaging team where your innovative ideas are heard, supported, andmake ever lasting mission impacts for our Nation's most sensitive programs, youhave come to the right place.

Fusion Innovation is seeking an Information Systems Security Engineer (ISSE) to provide technical support and administer cyber security projects and Assessment & Authorization (A&A) activities within the Sponsor’s organization.

• Technical cybersecurity role responsible for designing and embedding security controls into system architectures
• Ensure scans for all systems are run on a routine basis and work with system administrators/developers to patch vulnerabilities and policy failures
• A& A
  -review and complete required technical documentation (Accounts Management Plan, SOPs, etc.)
• Understanding of computer architecture, networking, operating systems, and network security
• Work with ISSMs to resolve any issues
• Develop, implement, and/or integrate Information Assurance (IA) and security systems, including those for networking, computing, virtualization, cloud, and enclave environments, to include those with multiple enclaves and with differing data protection/classification requirements.
• Review and conduct technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (lA) standards and regulations, and recommend mitigation strategies.
• Create and review Assessment and Authorization (A&A) Body of Evidence documentation and provide feedback on completeness and compliance of its content.
• Advise and assist the Sponsor's customers with the Lifecycle Assessment and Authorization process.
• Ensure all program activities maintain system baselines and configuration management items, including security event monitoring policies, in a manner determined and agreed to by the COTR and the Sponsor's management.
• Ensure changes are made using the Sponsor’s approved cybersecurity approval process and are coordinated and scheduled.
• Maintain appropriate levels of documentation deemed acceptable by Agency regulations and guidelines for each individual project, including operations and maintenance information, operations guides, design documents, scans, and overall concepts of operations.
• Enforce the design and implementation of trusted interfaces among external systems and architectures.
• Utilize COTS/GOTS and custom tools in order to scan, identify, contain, mitigate and remediate vulnerabilities and intrusions.
• Protect information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording and destruction.
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information.