Information Systems Security Engineer (ISSE) - Cyber Security Engineer (TS/SCI)

KaylaTek•Arlington, VA

7d•Onsite

About The Position

Our Cybersecurity Team is searching for an ISSE to provide cyber security and security engineering services for the National Military Command Center (NMCC) customer including system security engineering, cybersecurity risk assessments, and security architecture support.

Requirements

TS/SCI security clearance
Active CompTIA Security+ CE certification (8140 compliant)
A Bachelor's Degree in computer science, information technology, or related.
5+ years of experience in understanding all aspects of systems engineering, including design and architecture.
Demonstrated capability to identify security risks throughout information system network structures to include the Operating Systems, hardware, and various data transfer protocols.
Effective communication and presentation skills (i.e., ability to present ideas effectively in formal and informal situations in group and individual settings).
Strong planning, organizational, and time management skills (i.e., ability to effectively plan, organize, and prioritize work, and to control and follow up to ensure work completion).
Demonstrated initiative (i.e. initiate appropriate action without being directed) and ability to work independently
MUST BE A US CITIZEN

Nice To Haves

Master's degree (in computer science, information technology, or related) and 3 years of experience.
No degree with 12 years of intensive and progressive experience demonstrating the required proficiency levels related to task.

Responsibilities

Perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established cybersecurity standards and regulations and recommended mitigation strategies.
Build, deploy and Patch HBSS Windows and ACAS RedHat Linux 7.9 and 8 servers.
Build, maintain, and patch all ePO, Security Center, and Nessus servers.
Provide Security Center accounts for Vulnerability Managers to scan devices within ACAS.
Remediate vulnerability findings from ACAS scan results.
Obtain licenses for all HBSS ePO's and Tenable Security Centers.
Obtain HBSS and ACAS kickstart ISOs from DISA.
Build virtual servers, deploy, and patch all McAfee modules via the ePO.
Configure McAfee policies for each environment.
STIG HBSS Windows OS and McAfee policies to comply with benchmarks.
STIG ACAS RHEL.
Run SCAP scans on Windows and RHEL.
Update RedHat 9 and 8 rpms as they are released.
Setup RedHat yum local rpm repositories to patch offline ACAS servers.
Deploy Rogue sensors on each subnet.
Identify Rogue subnets and rogue endpoints.
Troubleshoot Security Center and Nessus scanner issues.