Information Systems Security Engineer; ISSE

Overview

VTG seeks to hire an Information Systems Security Engineer (ISSE) in McLean, VA to support the client and the team in defining security requirements; advises on, executes and oversees cybersecurity, information assurance (IA) programs, authority to operate (ATO), accreditation and authorization (A&A), User Activity Monitoring (UAM), and system security plans.

• Lead for automated security testing efforts leveraging Sponsor's enterprise scanning tools
• Responsible for creation and delivery of the Monthly Vulnerability Scans
• Responsible for creation and delivery of the Monthly Privileged Users and Admin report
• Overall lead for ensuring systems are secure by protecting data and ensuring need to know
• Responsible for working with the Tech team on creating any necessary POAM
• Help PM with the Contract Security Plan
• Work with PM and Sponsor's Information System Security Manager and INFOSEC Program Council as necessary
• Authors and maintain the program’s System Security Plan (SSP) for A&A
• Provide the required security education and plan to sponsor for the program
• Authors and maintain the program’s Automated Information Systems (AIS) Plan

• Clearance:
  Active TS/SCI with Polygraph
• Minimum of 4-7 years' experience with:
  • Application security standards and processes
  • Accreditation and Authorization (A&A), including documentation, POAMs, and remediation
  • Application and data security requirements for authorities to develop and operate systems (ATD, ATO) such as encryption, role-based security, information assurance, and monitoring/auditing/reporting
  • Coordination with engineering team to implement security requirements
  • Agile / Scrum