TS​/SCI Information Systems Security Engineer; ISSE

Information Systems Security Engineer (ISSE)

Springfield, VA - on-site requirement

Active TS/SCI Clearance required

The Edge Information System Security Engineer (ISSE) provides cybersecurity expertise to edge system stakeholders including information system owners, information security professionals, systems engineers, and administrators, ensuring technical alignment with overarching organizational requirements. The ISSE recommends compliant and secure solutions that effectively manage system risk.

• The ISSE is responsible for providing SME cybersecurity consulting services and escalated support to edge systems via the following activities:
• Understanding and translating DoD/IC and agency-specific cybersecurity policies, procedures, and security controls through the system development lifecycle.
• Maintaining awareness of new and upcoming policies or requirements and developing solutions to address the need.
• Streamlining cybersecurity management practices using common controls or centralized monitoring solutions as available. Conducting independent cybersecurity assessment testing and reporting to evaluate security control effectiveness, identifying deficiencies as plans of actions and milestones (POA&Ms), and providing recommendations that improve or enhance employed cybersecurity mechanism.
• Evaluating system body of evidence documents for compliance and providing recommendations that address gaps.
• Analyzing, evaluating, and providing recommendations on COTS, GOTS, and other technologies for system implementation.
• Supporting system engineers and administrators with implementing, testing, and transferring cybersecurity relevant solutions for long term operations and maintenance.
• Evaluating findings reported during cybersecurity assessments, providing recommendations to remediate concerns, and assisting in the development and closure of POA&Ms.
• Presenting, briefing, and providing status updates to senior leadership.
• Incumbent travel requirements are approximately 25% annually to support critical business needs and customer engagements.

Minimum Qualifications:

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering from an accredited University; OR one of the following certifications:
  • Certified Cloud Security Professional (CCSP);
  • Certified Security Software Lifecycle Professional (CSSLP);
  • CompTIA Cloud+;
  • CompTIA Security
    
    X (formerly CASP+)
• 7 or more years of experience as an information system security professional.
• Demonstrated proficiency and expertise in the following areas:
  • Implementing and facilitating the NSIT RMF within DoD/IC information systems
  • Applying secure configuration concepts, protocols, and security methodologies to local and Enterprise information systems
  • Developing and implementing organizational-level cybersecurity programs, such as continuous monitoring, vulnerability management, or incident response
  • Capturing, analyzing, and decomposing cybersecurity requirements applicable to information systems and developing solutions to address needs
  • Securing and evaluating information systems or compliance with DISA STIGs
• Excellent initiative, problem-solving, and analytical skills with an ability to work both independently and as a team.
• Excellent written, verbal, communication, presentation, and reporting skills.
• Shall meet the minimum credential requirements for a Cyber IT/Cybersecurity Workforce (CSWF) position as defined for the Cybersecurity discipline:
  Security Architect (652) – Intermediate Level.
• Demonstrated experience as an Information Systems Security professional.
• Demonstrated experience in Information Systems Security and Risk Management Framework (RMF) within the Intelligence Community (IC) and/or Department of Defense (DOD) community.

Security Clearance Requirements: This position will require an active DoD TS/SCI clearance and the ability to obtain and maintain a Counterintelligence (CI) Polygraph.

Desired

Qualifications:

• Administering or engineering various technologies such as Microsoft, Linux, Cisco, VMWare, SNOW, etc.
• Administering or engineering various cyber tools such as ACAS, Trellix, Splunk, ePO, Rapid7, or similar.
• Operating the SNOW CAM module in accordance with RMF.
• Employing and analyzing cyber resilience engineering practices.