Information Systems Security Engineer; ISSE; TS​/SCI Poly

Information Systems Security Engineer (ISSE) - TS/SCI Poly required

• Annapolis Junction, MD
• Computer/Software

We are seeking an experienced Information Systems Security Engineer (ISSE) to support a high-priority Intelligence Community / DoD mission. The ISSE will provide hands-on security engineering and assessment support across complex computing, networking, and enclave environments.

• Perform and/or review technical security assessments of computing and network environments to identify vulnerabilities, security gaps, and non-compliance with applicable IA/security standards and regulations.
• Develop mitigation strategies and support the resolution of identified security risks.
• Validate and verify system security requirements and contribute to system security architecture and design.
• Design, develop, implement, and integrate information assurance and cybersecurity solutions across computing, networking, and enclave environments, including multi-enclave environments with differing data protection and classification requirements.
• Build security controls and IA requirements into systems throughout the engineering and deployment lifecycle.
• Work with architects and system developers to identify and implement appropriate security functionality consistent with agency security policies and enterprise security solutions.
• Support the development and implementation of security architectures and trusted relationships between external systems and architectures.
• Assess and mitigate cybersecurity threats and risks throughout the system/program lifecycle.
• Support security planning, assessment, risk analysis, risk management, authorization, certification, and security awareness activities.
• Review security authorization and certification documentation for completeness, accuracy, and compliance.
• Apply security engineering expertise across areas including:
  • Security architecture and engineering lifecycle
  • Identity, authentication, authorization, and access control
  • PKI and cryptographic solutions
  • Cross-domain solutions
  • Network and enterprise security
  • System integration and security testing
  • Risk management and vulnerability mitigation
  • Intrusion detection and incident handling
  • Configuration and change management
  • Auditing and security assessmentsli>
  • Contingency planning
  • Security authorization / certification
• Support security authorization activities in accordance with NSA/CSS NISCAP, DoD RMF, NIST RMF
  , and applicable NSA/CSS security engineering processes.

• 12 years of ISSE experience supporting programs and contracts of similar scope, type, and complexity.
• Recent experience within the last 5 years applying cybersecurity principles and technologies, including:
  • Access control
  • Authorization
  • Identification and authentication
  • PKI
  • Network security
  • Enterprise security architecture
• Bachelor’s degree in Computer Science, Information Assurance, Information Security, Systems Engineering, or a related discipline from an accredited college or university.
• DoD 8570 / IASAE Level 2 compliance required.
• Four additional years of ISSE experience may substitute for the bachelor’s degree.