Information Systems Security Engineer (ISSE)

Description

The ISSE joins a team that reviews and assesses Risk Management Framework (RMF) authorization evidence for classified information systems.

That evidence includes the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Continuous Monitoring Plan, Incident Response Plan, Access Control Plan, Security Assessment Plan, and similar documents.

The company is a technology firm within a global parent organisation. It serves US federal clients in defense, national security, public safety, civilian, and military health, and has more than 13,000 people.

Responsibilities

• Check new and existing systems for technical compliance with directives and for protection of data at every classification level.
• Advise on detailed security design reviews and on threat and risk assessments.
• Contribute content to Plans of Action and Milestones (POA&Ms), SCTMs, and Risk Assessment Reports (RARs).
• Visit sites to inspect plans and security control implementations, carry out assessments, and support the Incident Response Team (IRT).

Requirements

• DoD 8570 IAT Level II certification or higher, such as Security+, CISSP, or CASP.
• 5+ years of hands-on work applying NIST 800-53 (Rev 4) and the RMF.
• 5+ years working with Windows and Linux environments.
• 5+ years working with virtualization or cloud environments.
• 2+ years in roles applying assurance and information security principles and practices.
• Compliance with JSIG or ICD 503.
• An active Secret clearance is required.
• Preferred: Top Secret clearance.
• Bonus: other security certifications, such as cloud, SIEM, forensics, Linux, or Windows.
• Bonus: experience in a DevSecOps project setting.
• Bonus: past or current work as a system administrator, developer, or engineer.
• Bonus: hands-on use of OpenRMF, eMASS, MS Active Directory, Splunk, ACAS/Nessus, McAfee, Windows, Linux, AWS Security, and similar tools.
• Bonus: strong spoken and written communication.
• Bonus: able to deal with users professionally and explain technical topics simply to semi-technical customers.
• Bonus: able to work with experienced government staff.
• Bonus: works well in a matrixed team and supports several efforts as required.
• Bonus: eager to learn new technologies and tools and willing to share knowledge with the team.

Conditions

The base pay range is $94,000 to $187,600 USD in California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia.

Actual pay varies by office location, role, skill set, and experience.

Applications are accepted on an ongoing basis with no fixed deadline.

The company is an equal opportunity employer that aims to make everyone feel respected and included.

Benefits

• A wide variety of benefits.
• Support to grow through hands-on work, certifications, and industry training.