INFORMATION SYSTEM SECURITY ENGINEER (ISSE)

DCS Corporation•Sterling Heights, MI

51d•Onsite

About The Position

Work within a customer setting to establish and satisfy complex system-wide information security requirements based upon the analysis of user, policy, regulatory, and resource demands.

Requirements

Due to the sensitivity of customer related requirements, U.S. Citizenship is required.
Must be able to obtain/maintain an Interim Secret security clearance.
5 years of experience with a Bachelor of IT, Cyber Security, Information Assurance, or Engineering.
Must comply with DOD and Army training requirements in DODD 8570.01, DOD 8570.01-M, and AR25-2 within 6 months after being employed.

Nice To Haves

Previous experience as an ISSE or an ISSO.

Responsibilities

Support customers in the development and implementation of doctrine and policies.
Apply security engineering to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures.
Ensure all acquisitions, procurements, and outsourcing efforts address information security requirements consistent with the Army and DoD.
Ensure security improvement actions are evaluated, validated, and implemented as required.
Evaluate the effectiveness of procurement function in addressing information security requirements and supply chain risks through procurement activities, and recommend improvements.
Identify alternative information security strategies to address security objectives.
Identify IT security program implications of new technologies or technology upgrades.
Interpret and/or recommend security requirements relative to the capabilities of new information technologies.
Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise.
Monitor and evaluate the effectiveness of cybersecurity safeguards to ensure they provide the intended level of protection.
Participate in the Risk Governance process to address security risks, mitigations, and input on other technical risks.
Promote awareness of security issues among management and ensure sound security principles are implemented.
Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
Assist with the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems, and processes).