Information Systems Security Engineer (ISSE)
About The Position
GDIT is seeking a mid-level Information Systems Security Engineer to support Assessment and Authorization (A&A) and Continuous Monitoring (ConMon) activities. The role ensures compliance with Risk Management Framework (RMF) requirements across multi-level classification environments with diverse technologies and services. The engineer supports cybersecurity for software application development using software security principles and adhering to DoD information assurance and IT standards for DTRA Defense Stockpile Management Systems (DSMS). The ISSE develops and coordinates cybersecurity architecture and design for DSMS, applies security controls and secure engineering practices, supports network accreditation, and integrates cybersecurity into system lifecycle activities. The role also researches and documents cybersecurity technologies and solutions, analyzes mission-critical system components and functions, and maintains criticality, vulnerability, and risk assessments and associated mitigations for Government review. The position includes preparing authorization requests and supporting evidence, coordinating with technical, security, and customer agency teams, executing continuous monitoring, evaluating changes and risks, assisting with incident investigations, and advising stakeholders on information assurance standards and security technologies. The position is onsite at the customer site in Fort Belvoir, Virginia, and requires a Secret clearance; the candidate must be a U.S. citizen.
Requirements
- Bachelor of Arts or Bachelor of Science degree.
- At least 2 years of related experience.
- Current Secret security clearance required; ability to obtain Top Secret clearance is listed in the requisition.
- U.S. citizenship required.
- Onsite work at the customer site.
- Skills in cybersecurity, information technology security, and system security.
Responsibilities
- Coordinate with DSMS program teams to plan and create cybersecurity architecture and design documents compliant with DoD and organizational information assurance policies and guidance.
- Implement security controls using software engineering methodologies, system and security engineering principles, secure design and architecture, and secure coding techniques.
- Develop cybersecurity architecture and design plans for collaboration products, operating system platforms, servers, devices, management products, applications, and related security implementations.
- Provide security engineering support for accreditation of DSMS networks.
- Integrate cybersecurity expertise into lifecycle management, architecture and design planning, migration and deployment, system testing, and implementation.
- Research, develop, test, and document architectures and solutions for new cybersecurity technologies.
- Develop criticality analyses of logic-bearing hardware, firmware, and software components and their relationship to system functions and vulnerabilities.
- Develop and update mission criticality analyses, vulnerability assessments, risk assessments, and countermeasure implementations for mission-critical functions; make supporting assumptions, rationale, results, supply-chain risk information, and mitigations available for Government review.
- Prepare and submit Interim Authorization to Test (IATT) and Authority to Operate (ATO) requests with Plans of Action and Milestones (PoAMs).
- Develop, maintain, and coordinate required Body of Evidence (BoE) documentation for system assets.
- Collaborate with Technical Services and Security Services teams and customer agency stakeholders to ensure compliance.
- Track lien remediation and resolution activities and update tracking tools.
- Evaluate system change requests and assess system and organizational risks associated with modifications.
- Execute continuous monitoring activities within established timelines, including BoE collection and tracking-tool updates.
- Conduct recurring reviews of system state and security posture to ensure secure operation and implementation of information systems security policies and procedures.
- Recommend security control implementations and identify necessary countermeasures or mitigating controls.
- Respond to requests and queries for security information and reports.
- Support security incident investigations and report findings as necessary.
- Assist with communicating, implementing, and enforcing security policies and plans for data, applications, hardware, and telecommunications systems.
- Advise stakeholders on information assurance standards, dependencies, and emerging security technologies.
- Use Enterprise Security Services tools, such as Trellix and ACAS, to track and remediate vulnerabilities and compliance deficiencies.
Benefits
- 401(k) with company match.
- Comprehensive health and wellness packages.
- Internal mobility support for career development.
- Professional growth opportunities, including paid education and certifications.
- Opportunities to learn and apply cutting-edge technology.
- Medical plan options, including options with Health Savings Accounts.
- Dental and vision plans.
- Flexible work weeks where possible.
- Paid time off, including vacation, sick and personal time, holidays, and paid parental, military, bereavement, and jury duty leave.
- Short- and long-term disability benefits.
- Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
