Associate Information Systems Security Engineer

Tcom, L.P.•Columbia, MD

About The Position

The Associate Information Systems Security Engineer (ISSE) will ensure security controls are in place and operational, supports the execution of scans and security related tests and manages security logs. Conduct periodic assessments of authorized systems and provide the ISSM with corrective actions for all identified findings and vulnerabilities. Develop and implement security designs for new or existing network system(s). Ensure that the design of hardware, operating systems, and software applications adequately address cybersecurity requirements for the IS and Network Environment. Design, develop, and implement network security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation. Design, develop, and implement specific cybersecurity countermeasures for the IS and Network Environment. Analyzes the information systems to ensure that appropriate security functions have been included in the systems design and architecture. Recommend and implement changes to enhance systems security and prevent unauthorized access. Research security trends new methods, and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach. Provide guidance and direction on best practices for the protection of information. Safeguards the network against unauthorized infiltration, modification, destruction or disclosure. Develops, tests, and operates firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools. Implements, enforces, communicates and develops security policies or plans for data, software applications, hardware, and telecommunications. Working Procedure: Verify stability, interoperability, portability, security, or scalability of system architecture. Aid in developing system engineering, software engineering, system integration, or distributed system architectures. Collaborate with engineers or software developers to select appropriate design solutions or ensure the compatibility of system components. Assist in performing technical security assessments of computing environments to identify points of vulnerability, non-compliance, with established Information Assurance (IA) standards and regulations. Enforce the design and implementation of trusted relations among external systems and architectures. Assess and mitigate system security threats/risks throughout the program life cycle. Generate Plans of Actions and Milestones (POA&Ms) to ensure weaknesses are identified, effective/acceptable mitigation strategies are planned, and timelines are acceptable and on track. Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness of activities for system and networking operations. Perform other duties and responsibilities as assigned.

Requirements

BS or BA in Computer Science, Information Assurance, Computer Engineering, or related discipline
DoD 8570/8140 compliant certifications are preferred
No prior experience required

Responsibilities

Ensure security controls are in place and operational
Support the execution of scans and security related tests
Manage security logs
Conduct periodic assessments of authorized systems
Provide corrective actions for all identified findings and vulnerabilities
Develop and implement security designs for new or existing network system(s)
Ensure the design of hardware, operating systems, and software applications adequately address cybersecurity requirements
Design, develop, and implement network security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation
Design, develop, and implement specific cybersecurity countermeasures
Analyze information systems to ensure appropriate security functions are included in the systems design and architecture
Recommend and implement changes to enhance systems security and prevent unauthorized access
Research security trends, new methods, and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach
Provide guidance and direction on best practices for the protection of information
Safeguard the network against unauthorized infiltration, modification, destruction or disclosure
Develop, test, and operate firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools
Implement, enforce, communicate and develop security policies or plans for data, software applications, hardware, and telecommunications
Verify stability, interoperability, portability, security, or scalability of system architecture
Aid in developing system engineering, software engineering, system integration, or distributed system architectures
Collaborate with engineers or software developers to select appropriate design solutions or ensure the compatibility of system components
Assist in performing technical security assessments of computing environments to identify points of vulnerability and non-compliance with established Information Assurance (IA) standards and regulations
Enforce the design and implementation of trusted relations among external systems and architectures
Assess and mitigate system security threats/risks throughout the program life cycle
Generate Plans of Actions and Milestones (POA&Ms)
Contribute to security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations
Perform other duties and responsibilities as assigned