Information Systems Security Engineer (6905)

MetroStar•Reston, VA

1d•$170,000 - $200,000

About The Position

The Information Systems Security Engineer safeguards the organization’s digital assets and sensitive information by contributing to the design, implementation, and maintenance of cybersecurity infrastructure. The role focuses on identifying threats and vulnerabilities, implementing security controls and solutions, monitoring systems for incidents, and integrating security throughout the development lifecycle. The engineer also documents security processes and reports on security findings, incidents, and remediation actions.

Requirements

Active TS/SCI clearance with CI poly.
Bachelor’s degree in Computer Science, Information Security, or a related field.
At least 7 years of experience as a cybersecurity engineer, including designing and building implementations of required security controls and implementing continuous monitoring and auditing for security-control compliance.
Strong skills specifying and implementing log collection into tools such as Splunk, and querying and analyzing aggregated logs to identify security-relevant anomalies or risks.
Strong experience implementing controls from government regulatory frameworks and security standards, such as NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
Experience implementing controls for cloud, container, and DevSecOps services and solutions within IL5 to IL6+ environments.
Strong understanding of network protocols, operating systems, and infrastructure components.
Proficiency in incident response, security incident handling, and forensic analysis techniques.
Effective communication skills, including the ability to explain complex technical concepts to technical and non-technical stakeholders.
CISSP or equivalent certification to support DoD 8140 requirements.

Nice To Haves

Experience with security tools such as Fortify, Acunetix, and Prisma Cloud.

Responsibilities

Design, implement, and manage security solutions, including firewalls, intrusion detection and prevention systems, endpoint protection, and encryption mechanisms.
Conduct regular security assessments to identify vulnerabilities and weaknesses in systems, networks, and applications.
Develop and implement incident response plans to address security breaches and incidents.
Collaborate with cross-functional teams to establish and enforce security policies, standards, and procedures.
Monitor network traffic, system logs, and security alerts to detect and respond to potential security incidents.
Analyze and investigate anomalies and security breaches, taking appropriate actions to mitigate risks.
Work with IT, software development, and compliance teams to integrate security into all phases of the development lifecycle.
Maintain thorough and accurate documentation of security processes, procedures, and configurations.
Prepare detailed reports on security findings, incidents, and actions taken.
Design and build implementations of required security controls, and implement continuous monitoring and auditing for compliance with those controls.
Specify and implement log collection in tools such as Splunk, and query and analyze aggregated logs to identify security-relevant anomalies or risks.
Implement security controls from government regulatory frameworks and standards, including NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
Implement controls for cloud, container, and DevSecOps services and solutions within IL5 to IL6+ environments.