Information System Security Engineer Level III

SYSTEM HIGH CORPORATION•Chantilly, VA

23h

About The Position

System High requires ISSE’s who are responsible for the design, development, implementation and/or Integration of the Information Assurance (IA) architecture, system, and system components for an IC client. They provide Information Technology security engineering, integration services, technical assessments, and solutions.

Requirements

Ability to interface with clients and develop productive working relationships to meet mission objectives.
Independent self-starter, proactive, professional, and assertive.
Excellent organizational skills with the ability to handle multiple projects simultaneously.
Strong communication and interpersonal skills; verbal and written.
Demonstrate a high level of professional confidentiality.
Available to work before/after typical office hours as requirements demand.
Travel may be required.
TS/SCI with CI Polygraph is required.
Ten (10) or more years of experience in IASAE
CISSP – ISSEP (Information Systems Security Engineering Professional)
CISSP – ISSAP (Information Systems Security Architecture Professional)

Nice To Haves

Knowledge of and experience with ICD 503 and the Government’s certification and accreditation process
System methodologies including: client/server, web hosting, web content servers, policy servers, directory servers, firewalls, WAN, MAN, LAN, switches, and routers
Experience in technical project management (Level 3)
Configuration and supporting Windows, Linux, Unix, Mac OS, VMware, Xen, and Hyper V
Configuration and Management (Level 3)
Integration Testing (Level 3)
Bachelor's degree in STEM desired

Responsibilities

Identifies information protection needs for enterprise Information Systems (IS)
Define IS security requirements
Develops and implements security designs for new or existing network systems; ensues that the design of hardware, operating systems, and software applications adequately address IA security requirements
Assess threats to and vulnerabilities of IS
Assess the effectiveness of information protection measures to IS
Ensures identified security deficiencies are mitigated, corrected, or a risk acceptance has been obtained
Participates in IS risk assessment and designs security countermeasures to mitigate identified risks
Oversee and provide technical guidance to ISSE level 2s
Documents system security design features and provides input to implementation plans and standard operating procedures
Develop cybersecurity documentation in support of customer RMF process; IAW NIST SP 800-37
Participate in IA Engineering Working Groups, ISSE forums, Integrated Product Teams, and provide IA guidance
Ensure the rigorous application of IA control implementation, principles, and practices in the delivery of agency IT systems guided by IC and DoD security policies