Sr Cloud ISSE Jobs

Senior Information System Security Engineer

Tagged: ISSO Open Systems Technologies Corporation is a leader in the government contracting marketplace, providing Enterprise Security and Cloud Computing solutions to support large organizations. Our capabilities include supplying federal government entities and private businesses with software development, scientific and engineering technical assistance, systems integration and enterprise security. Since its founding in 1996, OST has been committed to delivering high-quality, best-in class results that bring added value to our clients, while investing in our employees' futures by providing exciting projects to work on, and robust benefits to include technical training and certifications, relocation assistance and a 401K match with immediate vesting.

We are looking for a Senior Information System Security Engineer to support IS Security Services. The Information System Security Engineer (ISSE) at a minimum, shall consist of the following activities:

• Identify information protection needs for an IS and Network Environment
• Define IS and Network Environment security requirements in accordance with applicable cybersecurity requirements
• Design security architectures for use within the IS and Network Environment
• Design and develop cybersecurity-enabled products for use within an IS and Network Environment
• Integrate and/or implement security with Cross Domain Solutions (CDS) for use within an IS and Network Environment
• Develop and implement security designs for new or existing network system(s)
• Ensure that the design of hardware, operating systems, and software applications adequately address cybersecurity requirements for the IS and Network Environment
• Design, develop, and implement network security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation
• Design, develop, and implement specific cybersecurity countermeasures for the IS and Network Environment
• Develop interface specifications for the IS and Network Environment
• Develop approaches to mitigate IS and Network Environment vulnerabilities and recommend changes to network or network system components as needed
• Ensure that network system(s) designs support the incorporation of FBI directed cybersecurity vulnerability solutions
• Familiarity with the use and operation of security tools including Tenable Nessus and/or Security Center, IBM Guardium, HP Web Inspect, Network Mapper (NMAP), and/or similar applications
• Works with government and industry customers to provide cyber security expertise for an AWS or Oracle Cloud Infrastructure (OCI) program
• Supports government decision making by reviewing cloud systems for compliance with NIST 800-53 and the DoD Risk Management Framework (RMF)
• Assists with providing resolution for an Authorization to Operate (ATO), and Federal Risk and Authorization Management Program (FedRAMP)
• Provide subject matter expertise in security principles and cloud security best practices to technical and acquisition project teams and assess potential security risk that might result from inadequate design decisions or incomplete integration of cloud-based tools
• Develops highly scalable applications that adhere to cloud and security best practices
• Demonstrate working in an operational environment where priorities change frequently.
• Provide Information Assurance perspective and guidance during cloud planning/discussions and provide security support with reach back to OCIO as needed.
• Recommend best practices with regards to information security, information assurance, and cloud cyber security.
• Support making recommendations to leadership and developing a monitoring and event logging strategy in the cloud as the FBI/OCIO considers future cloud migration efforts.

Minimum Qualifications:

Required to hold at least one of the following certifications:
Certified Information Systems Security Professional (CISSP) (or Associate), CompTIA Advanced Security Practitioner (CASP) CASP CE, Certified Secure Software Lifecycle Professional (CSSLP), CISSP
- Information System Security Engineering Professional (ISSEP), or CISSP
- Information System Security Architecture Professional…