Information System Security Engineer (ISSE)

Resource Management Concepts, Inc.•Crane, IN

4h•Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking an Information Security Analyst to fill the role of Information Security Systems Engineer (ISSE) to support a customer at Crane Naval Base in Indiana. The selected applicant will be responsible for a variety of Information Assurance and Risk Management Framework (RMF) activities, including designing, implementing, testing, and fielding secure systems, networks, and architectures. This role involves developing and enforcing information systems security policies, managing certification and testing in accordance with RMF and NIST policy, identifying deficiencies, and providing risk mitigation recommendations. The ISSE will also support the customer in resolving conflicting security requirements and developing program technical publications.

Requirements

A bachelor's degree and a minimum of three (3) years of relevant experience are required.
An associate degree plus four (4) additional years of relevant work experience may be substituted for a bachelor’s degree.
Must possess DoD 8570/DoN 5239 IAT Level II certification, such as Security+ CE.
An active DoD Secret clearance is required to start.
The applicant may be subjected to a security investigation and must meet eligibility requirements for access to classified information.
A Journeyman level candidate will be expected to perform all functional duties independently.

Responsibilities

Perform analysis and evaluation to design, implement, test and field secure systems, networks, and architectures.
Develop, implement, and enforce information systems security policies ensuring system security requirements are addressed during all phases of the acquisition and Information System (IS) lifecycle.
Manage certification and testing in accordance with the Risk Management Framework (RMF) and National Institute of Standards and Technology (NIST) policy; identify deficiencies and providing recommendations of risk mitigation to customer.
Support the customer to resolve conflicting security requirements.
Develop program technical publications such as Systems Engineering Plans (SEP), Technical Plans, Analyses and Reports, Risk Assessments, Program Protection Plan, Anti-Tamper Plan, Cybersecurity Strategy, Technology Development Strategies, Test Plans, and procedures.