Information Systems Security Engineer (ISSE) - TS/SCI Poly required

Information Systems Security Engineer (ISSE)

We are seeking an experienced Information Systems Security Engineer (ISSE) to support a high-priority Intelligence Community / DoD mission. The ISSE will provide hands-on security engineering and assessment support across complex computing, networking, and enclave environments.

Responsibilities

• Perform and/or review technical security assessments of computing and network environments to identify vulnerabilities, security gaps, and non-compliance with applicable IA/security standards and regulations.
• Develop mitigation strategies and support the resolution of identified security risks.
• Validate and verify system security requirements and contribute to system security architecture and design.
• Design, develop, implement, and integrate information assurance and cybersecurity solutions across computing, networking, and enclave environments, including multi-enclave environments with differing data protection and classification requirements.
• Build security controls and IA requirements into systems throughout the engineering and deployment lifecycle.
• Work with architects and system developers to identify and implement appropriate security functionality consistent with agency security policies and enterprise security solutions.
• Support the development and implementation of security architectures and trusted relationships between external systems and architectures.
• Assess and mitigate cybersecurity threats and risks throughout the system/program lifecycle.
• Support security planning, assessment, risk analysis, risk management, authorization, certification, and security awareness activities.
• Review security authorization and certification documentation for completeness, accuracy, and compliance.
• Apply security engineering expertise across areas including:
• Security architecture and engineering lifecycle
• Identity, authentication, authorization, and access control
• PKI and cryptographic solutions
• Cross-domain solutions
• Network and enterprise security
• System integration and security testing
• Risk management and vulnerability mitigation
• Intrusion detection and incident handling
• Configuration and change management
• Auditing and security assessments
• Contingency planning
• Security authorization / certification
• Support security authorization activities in accordance with NSA/CSS NISCAP, DoD RMF, NIST RMF, and applicable NSA/CSS security engineering processes.

Required Qualifications

• 12 years of ISSE experience supporting programs and contracts of similar scope, type, and complexity.
• Recent experience within the last 5 years applying cybersecurity principles and technologies, including:
• Access control
• Authorization
• Identification and authentication
• PKI
• Network security
• Enterprise security architecture
• Bachelor’s degree in Computer Science, Information Assurance, Information Security, Systems Engineering, or a related discipline from an accredited college or university.
• DoD 8570 / IASAE Level 2 compliance required.
• Four additional years of ISSE experience may substitute for the bachelor’s degree.