Information Systems Security Engineer (ISSE) - FULLY CLEARED with POLYGRAPH REQUIRED

Constellation Technologies•Fort Meade, MD

30d•Onsite

About The Position

The Information Systems Security Engineer (ISSE) will be responsible for ensuring the security of information systems, applying Risk Management Framework (RMF), and utilizing various security tools and practices. This role requires a deep understanding of security policies, vulnerability testing, and secure configurations of operating systems. The ISSE must be adept at working with multiple systems simultaneously and possess strong communication and planning skills, capable of performing high-quality work both independently and as part of a team in a fast-paced environment.

Requirements

Must be a US Citizen.
Must have TS/SCI clearance w/ active polygraph.
Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline.
Twelve (12) years of experience working as an ISSE on a large technical program.
Solid understanding of security practices and policies.
Hands-on vulnerability testing experience using Customer tools.
Experience applying Risk Management Framework.
Experience formulating and assessing IT security policy.
Demonstrated knowledge of and experience with common security tools, such as Nessus, NMAP and Wireshark.
Knowledge of hardware/software security implementation, communication protocol, encryption techniques/tools, and web services.
Experience with secure configurations of commonly used desktop and server operating systems.
Comfortable working on multiple systems and components simultaneously in various configurations.
Strong verbal and written communications skills.
Committed to adopting and adhering to best practices.
Able to effectively plan and prioritize tasking.
Able to communicate clearly regarding technical options and trade-offs.
Capable of performing high quality work both independently and with a team in a fast-moving environment.

Nice To Haves

Five (05) years of experience with Defense in Depth Principals/technology (including access control, authorization, identification and authentication, public key infrastructure, network and enterprise security architecture) and applying risk assessment methodology to system development.
DoD 8570 compliance with IASAE Level 2 or 3.
Information Systems Security Engineering Professional (ISSEP) Certification.
Computer Information Systems Security Professional (CISSP) Certification.
Experience developing/implementing integrated security services management processes, such as assessing and auditing network penetration testing, anti-virus planning assistance, risk analysis, and incident response.
Experience providing information assurance support for application development that includes system security certifications and project evaluations for firewalls that encompass the development, design, and implementation.
Experience with penetration testing tools.
Experience with scripting languages.

Responsibilities

Apply Risk Management Framework (RMF).
Perform vulnerability testing using Customer tools.
Formulate and assess IT security policy.
Implement hardware/software security, communication protocols, encryption techniques/tools, and web services.
Ensure secure configurations of commonly used desktop and server operating systems.
Work on multiple systems and components simultaneously in various configurations.
Plan and prioritize tasking effectively.
Communicate clearly regarding technical options and trade-offs.
Perform high-quality work independently and with a team.
Develop and implement integrated security services management processes, such as assessing and auditing network penetration testing, anti-virus planning assistance, risk analysis, and incident response.
Provide information assurance support for application development that includes system security certifications and project evaluations for firewalls that encompass the development, design, and implementation.

Benefits

Affordable healthcare options with 80% employer paid premium PLUS a company-funded HSA
Comprehensive Dental package
Vision with 80% employer paid premium
Employer paid Life insurance 100%
Employer paid Short-term and Long-term disability 100%
Annual training, continued education, and professional memberships reimbursement
Unlimited access to Red Hat Enterprise Linux, AWS, and NetApp training and accreditation
Annual reimbursement for technology i.e. phones, computers, printers, etc...
401(k) with company match up to 5% with 100% immediate vesting (after 90 days of employment)
Professional development investment and paid time off for training