Information Systems Security Engineer (ISSE) 102310 with Security Clearance

Location: Aurora

Information Systems Security Engineer (ISSE)

Location:

Aurora, CO.
Required Clearance:
Top Secret/SCI with CI Poly Since 1999, ITEC has been a powerhouse in supporting mission-critical programs for the DoD and Intelligence community, building a solid reputation along the way. At ITEC, we don’t just care for our employees—we champion them with competitive salaries, an outstanding employee care program, and a benefits package that includes Medical, Dental, Vision, Paid Time Off, and a 401k match.

U.S. Citizenship Mandatory:
Due to our US federal government contract, candidates for this position are required to be a US Citizen and will be subject to a background investigation.

Job Description:

The ISSE will join our classified program engineering team in Aurora, CO, supporting a high-priority 24x7 operational system. The ISSE performs core activities to include providing certified services and support for Information Assurance/Program Protection efforts for compliance with governing DoD Cybersecurity directives. This position will support activities of the program to target, assess, and report risks and vulnerabilities of Intelligence Community organization systems to provide senior decision makers with actionable data to make strategic decisions.

The ISSE shall perform, or review, technical security assessments of computing environments to identify points of vulnerability and non-compliance with established Information Assurance (IA) standards, regulations and recommend mitigation strategies. This position is responsible for the maintenance and administration of multiple domains, including a 24/7 operational system and a test facility. Must be willing to occasionally provide after­ hour support to the 24/7 operational system.

Job Responsibilities:

* Implement Information Assurance (IA) processes, provide guidance, and develop documentation throughout the system development life cycle via the RMF tool in ServiceNOW.
* Develop, implement, and document formal security policies and System Security Plans (SSP) throughout the program and monitor compliance with these policies during all phases of the Risk Management Framework (RMF) process.
* Utilize Enterprise Security Services to provide analysis of vulnerabilities and compliance risks in ACAS, Enterprise IT audit logs in Arc Sight and Splunk, McAfee Host-Based Security Services (HBSS), User Activity Monitoring (UAM), and Cyber Terrain Mapping (CTM) on 100+ nodes.
* Monitor Heat Map Score matrix and evaluate cyber risk data, keeping the score at acceptable risk levels for the security categorization of the asset(s) and their Risk Evaluation Lanes (REL).
* Manage and deliver system authorization and accreditation packages, for 3 assets that span 3 different classification levels.
* Review and make recommendations on program-level documentation (e.g., requirements specification, system architecture, design documents, test plans, security plans, etc.).
* Assess/calculate risk based on threats, vulnerabilities, and shortfalls uncovered in routine analyzation of Continuous Monitoring (Con Mon) controls and provide those results as Body of Evidence (BoE) to be evaluated in 7, 30, 90 and 365 day increments as the control metrics require.
* Direct activities required to remediate system-level information security weaknesses tracked via the FISMA (POA&M) process. Document the elements of the plans, milestones for correcting the weaknesses, and scheduled completion dates for the milestones, periodically reporting remediation progress as necessary.
* Brief leadership, as needed, on the status of action items and/or results of activities affecting the security posture of the program.
* Able to collaborate and communicate effectively with other system engineers, system administrators, software developers, and information assurance professionals.

Required Skills:

* Minimum 5 years' experience, in a security position for the government or government contractor in the Intelligence Community (IC).
* 10 years’ experience in lieu of formal degree.
* DoD 8570.01 IAT level 2 or greater cybersecurity certification per DoD 8570.01.
* Experience in security systems engineering…