ISSE Security Clearance

Position: ISSE with Security Clearance
Information System Security Engineer Fairfax, VA or Greenwood Village, CO Active TS/SCI w/CI Poly Clearance is Required

Job Description:

Seeking an Information System Security Engineer (ISSE). The role of the ISSE is to bridge the gap
between high level security policies/requirements and technical/operational implementation of those
requirements. Candidates should have in-depth understanding of the cybersecurity policies and procedures for
Government (DoD, Intelligence Community) sectors information systems and sufficient technical knowledge and
experience to implement them. The ISSE will work closely and effectively with the Information System Security
Manager (ISSM) ISSM, and the Program Manger on all aspects of their development and implementation
programs. Candidates should have in-depth understanding of the cybersecurity policies and procedures for
Government sector information systems and sufficient technical knowledge and experience to implement them. The ISSE will provide guidance, standards, and oversight to the program/development teams as they work
towards accreditation and then to maintain the accreditation. The candidate will contribute to the team’s
successful Assessment and Authorization (A&A) process activities (ICD-503 RMF) and related documentation
such as security concept of operations, systems security plans, security control assessments, contingency plans,
configuration management plans, incident response plans, plan of actions and milestones, risk management
plans, vulnerability and compliance scanning, and/or vulnerability management plans. The ISSE will be an experienced System Administrator and Cyber Security Expert. The candidate will be
supporting a larger team of developers, engineers, and analysts all charged with expanding, operating, and
maintaining information systems built upon hundreds of Linux instances on virtual and bare metal hardware.
Team responsibilities include Linux system build automation, network architecture and implementation, all
facets of cyber security compliance, deployment and management of core subsystems and services. The ISSE will
assume responsibility for ICD-503 RMF process for these multiple information systems including patching, scans,
reports, documentation, coordinating plans of actions and milestones, audit log reviews and other related
duties. The ISSE will help determine and recommend appropriate solutions and implementations to help meet program
needs. Candidate must possess the ability to communicate effectively and be flexible, adaptable, and willing to
take ownership of projects. Candidate will have several technical areas of primary responsibility depending on experience and will be
expected to cross train and support other areas as needed. Superior attention to detail is required. Must exhibit
positive attitude and good customer service skills in sometimes stressful situations, such as during outage
troubleshooting and resolution.

Required Skills:

 Active TS/SCI + CI Poly 1 ,  Information Assurance (IA) and Information Security (Info Sec) experience working with Intelligence Community (IC) customers, which includes developing and reviewing security concept of operations, systems security plans, security control assessments, contingency plans, configuration management plans, incident response plans, plan of actions and milestones, risk management plans, vulnerability and compliance scanning, and/or vulnerability management plans.

Must have significant expertise in ICD- 503 A&A process and documentation preparation.  Security engineering experience; which includes systems engineering principles, configuration management, supply chain, requirements analysis, system development (software and hardware); network security architecture concepts (topology, protocols, components); and/or IT security principles and methods (firewalls, demilitarized zones, encryption).  Required experience with ICD-503 security frameworks to include A&A process and documentation preparation.

Also desired is experience in NIST SP 800-37, CNSS publications, and other Risk Management Framework (RMF) processes.  Experience providing continuous monitoring support for…