Information Systems Security Engineer (ISSE)

Systems Technology Forum

395d

About The Position

The position involves executing Risk Management Framework (RMF) processes to support system authorization within Systems Technology Forum LTD (STF). The role is crucial for ensuring compliance with cybersecurity standards and maintaining system integrity for clients, particularly in the defense sector. The job supports telework at a limited capacity and does not require travel.

Requirements

• Must have at least five (5) years of experience in providing cybersecurity services using Risk Management Framework (RMF).
• Must have at least five (5) years of experience with the DoD authoritative Enterprise Mission Assurance Support Service (eMASS).
• Must have at least five (5) years supporting Independent Validation and Verification (IV&V) test events.
• Must have at least five (5) years providing validation of required artifacts in the Information System Security Manager/Engineer (ISSM/ISSE) Security Assessment Package.
• High School Diploma is required.
• Certifications: Security+ or CISSP.

Responsibilities

• Participates in system categorization and maintains the formal decision document as part of the system's authorization package.
• Identifies and documents all hardware and software within the system architecture using the format/template on eMASS.
• Drafts and updates system architecture and data flow diagrams.
• Ensures all IA-enabled devices and applications are DON application and Database Management System (DADMS) approved.
• Tailors system security controls and identifies any common controls and overlays in eMASS.
• Develops policy letters for control families and ensures appropriate Control Correlation identifiers are documented.
• Develops and executes Security Assessment Plans, including completing all applicable STIGs, performing vulnerability scans, and documenting results.
• Ensures traceability throughout the system and that eMASS records are completed and ready for Security Control Assessment.
• Supports IV&V test events and addresses immediate feedback on system test results, control assessments, and policy documentation.
• Validates all required artifacts are current and representative of the systems being presented for AO adjudication.
• Evaluates continuous monitoring plans and participates in operational assessments.
• Participates in weekly and/or ad-hoc meetings.

Benefits

• Medical Plans administered through United HealthCare
• Vision and Dental Plan Benefits
• 401(k) Tax-Deferred Retirement Plan
• Accidental Death and Dismemberment Insurance
• Dependent / Medical Care Flexible Spending Account
• Direct Deposit
• Health and Welfare Medical
• Holiday Leave
• Industry Competitive Salaries
• Life Insurance (basic and supplemental)
• Paid Time Off / Annual Comprehensive Personal Leave
• Performance / Award Bonuses
• Professional Development Coursework
• Technical Training
• Tuition Assistance Program
• TotalChoice™ Voluntary Benefits
• STF Cares / Paid Time Off to Volunteer

What This Job Offers

• Job Type: Full-time
• Industry: Computer and Electronic Product Manufacturing
• Education Level: High school or GED