Information System Security Engineer

MIT Lincoln Laboratory•Lexington, MA

1d•$134,100 - $181,000

About The Position

The Security Department at MIT Lincoln Laboratory identifies and counters security threats to the Laboratory’s national security research mission, including threats from foreign intelligence agencies and insider threats. It protects facilities, personnel, information systems, personally identifiable information, property, and other assets. The department fosters an inclusive, technology-focused environment where security professionals work closely with research teams and government counterparts. Flexible schedules and hybrid remote work arrangements may be available where mission needs allow. The Information System Security Engineer assists in designing, configuring, and securing classified systems and networks across traditional and virtual environments. The role performs security reviews, identifies architectural gaps, develops risk management plans, integrates and tests software, and supports systems with multiple classification levels and Cross Domain Solutions. It also contributes to security documentation, DevSecOps activities, secure network architecture, compliance assessments, policy gap analyses, audits, system authorization, sanitization, and incident response. The engineer serves as an information security representative to multiple Department of Defense agencies and supports oversight of information security operations for collateral systems.

Requirements

Current Top Secret clearance with SCI eligibility.
U.S. citizenship.
Successfully pass a background check and consent to a government polygraph examination.
Bachelor’s degree in Computer Science, Information Technology, Computer Information Systems, or a related discipline; technical experience and skills, coursework toward a degree, and industry IT certifications may be considered substitutes for education and DoD security experience.
Active knowledge of NISPOM, DAAPM, DISA Policy STIGs, and NIST RMF.
Technical skills securing multiple traditional and virtual systems, including Windows Server 2016 and 2019, Windows 10, Red Hat Enterprise Linux, Ubuntu, and Mac.
Experience developing and integrating Data Loss Prevention strategies using Endpoint Security solutions.
Demonstrated ability to present ideas in writing and orally in a cross-functional environment.
A minimum of 10 years of IT security experience in DoD Industrial Security, with leadership skills relevant to this experience.

Nice To Haves

DoD 8570.01-M IASAE Level II baseline certification, or ability to obtain one within six months of employment.
ISC2 CISSP.
Experience and skill developing and integrating network environments of various sizes, including network infrastructure products such as routers and switches.
Prior experience working in a collaborative team environment.
Prior experience working with Special Access Programs government networks.

Responsibilities

Assist in security design and configuration of classified systems and networks in traditional and virtual Linux, Mac, and Windows environments.
Perform security reviews, identify gaps in security architecture, and develop security risk management plans.
Integrate, test, and configure Free and Open Software (FOSS), Commercial-off-the-Shelf (COTS), Government-off-the-Shelf (GOTS), and custom software.
Develop and integrate cybersecurity designs for systems and networks with multilevel security requirements, multiple classification levels, or information transfers through Cross Domain Solutions (CDS).
Provide security direction to design and development teams and monitor progress and productivity through planning and metrics.
Assist in developing System Security Plans (SSPs) and related artifacts, including network diagrams, architectural plans, operating system baselines, and standardized configurations.
Provide input and direction to DevSecOps programs, including selection of application security testing tools such as SAST, DAST, and dependency analysis tools, and application security assessments.
Apply Protected Distribution System (PDS) requirements and TEMPEST concepts to existing and planned infrastructure.
Design, implement, and maintain secure network architectures supporting multiple systems, programs, and security boundaries.
Configure and manage VLANs, trunking, routing protocols, access control lists (ACLs), network segmentation, and secure management interfaces.
Support OSPF, BGP, and static routing technologies as applicable to the environment.
Act as the Laboratory information security representative to multiple Department of Defense agencies.
Lead preparation for technical portions of periodic organization compliance assessments.
Perform information security policy gap analysis and formulate corrective actions.
Assist the ISSM team with compliance audits, system authorization, sanitization, and incident response.
Assist Information Security Management with oversight of information security operations for collateral systems.