Information System Security Engineer (ISSE) - Hybrid

Coalfire Federal•, DC

2d•Hybrid

About The Position

The mid-level Information System Security Engineer will provide services related to the enhancement, expansion, or consolidation of cybersecurity information assurance support. Support may include activities such as the systematic transfer of cybersecurity monitoring or incident response workloads to designated operations centers, or (in the case of newly identified threats or vulnerabilities) providing initial support to address and mitigate the impact of such threats.

Requirements

Experience performing IT product security specification reviews
Prior experience in creating Security baselines for Information systems and must perform a Security Impact analysis for all exceptions or deviations.
Understanding of the NIST Risk Management Framework and associated special publications (800-37, 800-53, etc)
Understanding of cloud solutions e.g. IaaS, PaaS, and SaaS
Communication, written, verbal
At minimum 5 years of professional ISSE experience or similar roles in the cybersecurity / IT space is required
Completed Bachelor’s degree from an accredited university, preferably in an IT related field.
One or more of the following must be active and verifiable: CISM, CISA, GSLC, or Security +

Nice To Haves

Cloud related experience and or certifications
JCAM experience preferred
Ability to obtain a clearance or a Public Trust is preferred, however all clearance levels and non-cleared applicants will also be considered.
NIST Cybersecurity Framework experience
Cybersecurity work experience within the federal space
Familiarity with AI tools and governance
Experience with process improvement, documenting procedures and workflow
CISSP certification

Responsibilities

Security oversight of system deployments, system and component configuration, monitoring and reporting.
Performing security impact assessments, security testing, and working with operations and development teams on remediation and mitigation of findings.
Planning, designing and implementing security controls which safeguard and monitor events for information systems, enterprise applications and data.
Information system security engineering support to verify and validate proposed architectures and implementations based on sound security engineering principles and practices.
Identifying security requirements and providing input to the system design to ensure the proper controls are built-in.
Participating in planning and executing in the system development life cycle of new system cycles.
Conducting risk analysis and updating the risk assessment report for all changes to the FISMA systems; and provide a security impact analysis to include but not limited to the change to the overall system risk rating and posture and documentation that is impacted requiring updates.