Information System Security Engineer (Isse) L4 - Must Have Active Ts/Sci Clearance

NorthHill Technology•Lorton, VA

11h•Onsite

About The Position

One of our clients is searching for a Senior Information System Security Engineer (ISSE) to join their dynamic team of experts in Lorton, VA. In this role, you will provide engineering, administration, and sustainment for a suite of cybersecurity tools — including Splunk, Nessus/ACAS, Trellix ePO, and STIG/SCAP — supporting the development and sustainment of secure enclaves at the edge that deliver enterprise services and cyber network defense capabilities across the DoD. You will perform technical security assessments to identify vulnerabilities and non-compliance with Information Assurance standards, and recommend mitigation strategies to the ISSM/ISSO. Candidates should bring strong technical depth across identity, endpoint, and vulnerability management tooling, along with a background supporting classified DoD environments.

Requirements

Bachelor's degree in Computer Science, Engineering, Finance, Business, or a related field AND 3+ years of leadership experience in a relevant area of business, OR equivalent experience.
8+ years of demonstrated performance in related technology.
5+ years of related experience in an SCI/SAP environment.
Security+ Certification.
Active TS/SCI security clearance.
Advanced technical competency in: ACAS/Nessus
Advanced technical competency in: Trellix/ePO
Advanced technical competency in: Active Directory Domain Services
Advanced technical competency in: Active Directory Federated Services
Advanced technical competency in: Active Directory Certificate Services
Advanced technical competency in: Windows Server Update Services
Advanced technical competency in: Splunk
Advanced technical competency in: STIG/SCAP
Advanced technical competency in: Azure Monitor / Log Analytics
Must be within driving distance of Lorton, VA OR willing to relocate there (relocation packages available).
Must be willing to work onsite.
Strong written and verbal communication skills with excellent attention to detail and documentation accuracy.
Ability to work independently and collaboratively in a mission-focused environment.
Must be willing and able to travel up to 25%.
Must possess an active TS/ SCI clearance or above.
Pursuant to a government contract, this specific position requires U.S. citizenship status.

Nice To Haves

5+ years of leadership experience in a relevant area of business.
Technical certifications in Azure.
DoD IAT Level III Certification (CISSP or CASP).
Container security familiarity (Docker/Kubernetes/AKS/EKS).

Responsibilities

Design, implement, and maintain distributed Splunk Enterprise environments, including RBAC, dashboards, reports, and alert capabilities.
Administer Nessus Scanner/Manager and Security Center, developing custom scans, reports, and maintaining vulnerability plugins.
Manage Trellix ePO endpoint security, including custom policies, software deployments, and security content updates.
Design and implement security requirements for hybrid cloud environments to meet RMF requirements.
Engineer unique solutions to support ongoing Cyber Threat and Cyber Defensive Operations.
Automate threat assessment and reporting activities, and provide audit support.
Analyze and report system and organizational security posture trends to the ISSM/ISSO.
Assess access controls, configuration management processes, and security control effectiveness, reporting findings to the ISSM/ISSO.
Implement security measures to resolve vulnerabilities, mitigate risks, and recommend system security changes as needed.
Develop, maintain, and update technical documentation, including System Security Plans (SSPs), engineering diagrams, and implementation guides.
Support ISSM/ISSO cybersecurity and RMF activities required to achieve and maintain an Authority to Operate (ATO).
Monitor and investigate security breaches, and educate employees and clients on security procedures and programs.
Receive enterprise cyber tickets and resolve via automation when possible.