ISSE (Mid or Senior)

WOOD Federal Solutions • Annapolis Junction, MD

6d • $160,000 - $230,000 • Onsite

About The Position

WOOD Federal Solutions is hiring an Information Systems Security Engineer to support a large, complex, geographically distributed mission environment. The role works across system architecture, risk management, compliance, vulnerability assessment, and secure design, in close collaboration with engineering, integration, testing, and program teams.

The engineer will help shape and validate security requirements for large-scale systems; assess threats and risks throughout the system lifecycle; evaluate security architectures and controls; and recommend technical solutions to strengthen security. The work includes Risk Management Framework (RMF) activities, security planning and assessment, continuous monitoring, configuration review, vulnerability analysis, security verification testing, and developing and enforcing security policies, standards, and methodologies.

The position serves as a security subject matter expert across multiple technical domains. The engineer works with system engineers, developers, testers, program leadership, and customer stakeholders to identify and remediate security issues, assess the impact of new capabilities, evaluate secure configurations, and ensure systems meet mission and compliance requirements. Candidates must be U.S. citizens and hold a TS/SCI clearance with an appropriate polygraph.

Requirements

• At least 12 years of experience working as an ISSE on a large technical program.
• U.S. citizenship and a TS/SCI security clearance with an appropriate polygraph.
• Solid understanding of security practices and policies, and hands-on vulnerability testing experience using customer tools.
• Experience applying the Risk Management Framework.
• Experience formulating and assessing IT security policy.
• Knowledge of and experience with common security tools such as Nessus, NMAP, and Wireshark; hardware/software security implementation; communication protocols; encryption techniques and tools; and web services.
• Experience with secure configurations of commonly used desktop and server operating systems.
• Ability to work on multiple systems and components simultaneously in various configurations.
• Strong verbal and written communication skills.
• Commitment to adopting and adhering to best practices.
• Ability to plan and prioritize tasks effectively and communicate technical options and trade-offs clearly.
• Ability to produce high-quality work independently and as part of a team in a fast-moving environment.

Nice To Haves

• Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline.
• Five years of experience with Defense in Depth principles and technologies, including access control, authorization, identification and authentication, public key infrastructure, and network and enterprise security architecture, and applying risk assessment methodology to system development.
• DoD 8570 compliance with IASAE Level 2 or 3.
• Information Systems Security Engineering Professional (ISSEP) certification.
• Computer Information Systems Security Professional (CISSP) certification.
• Experience developing or implementing integrated security services management processes, such as network penetration testing assessment and auditing, anti-virus planning assistance, risk analysis, and incident response.
• Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls covering development, design, and implementation.
• Experience with penetration testing tools.
• Experience with scripting languages.

Responsibilities

• Validate and verify system security requirements and establish security designs for large-scale systems, major system elements, and interfacing systems in complex, geographically distributed network environments.
• Identify and implement information security architectures and functionality that support consistent security policy application and enterprise solutions.
• Recommend and develop technical solutions, products, and standards based on current and desired system security architecture.
• Assess and mitigate system security threats and risks throughout the program lifecycle.
• Lead or contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.
• Collaborate daily with internal technical experts.
• Communicate with Program Managers and customer organization points of contact about significant security issues as needed.
• Participate in Program Increment Planning and related agile team activities.
• Work with System Engineering, Test Engineering, and Integration teams to ensure hardware and software architecture and implementation meet security requirements.
• Assess system implementations against security compliance policies and recommend and implement enhancements.
• Evaluate security solutions against customer requirements for information processing.
• Evaluate the effects of new development on the system's operational security posture.
• Review and test critical software.
• Propose, assess, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
• Audit and assess system security configuration settings using common methodologies and tools.
• Manage and enforce security strategies and policies affecting components of geographically distributed systems.
• Provide configuration management for security-relevant information system software.
• Serve as a security architecture subject matter expert and advise Program Managers, customer technical experts, and internal program teams.
• Formulate security compliance requirements for new system features.
• Identify and remediate security issues throughout the system.
• Support risk assessment, risk management, security control assessment, continuous monitoring, service design, and other information assurance program functions.
• Help development teams improve their understanding of vulnerabilities, attack vectors, and remediation approaches.
• Plan and conduct security verification testing of relevant Type 1 devices.

Benefits

• Comprehensive medical, dental, and vision coverage.
• 401(k) plan with company match.
• Paid vacation, sick leave, and company holidays.
• Training, certifications, and continued professional growth opportunities.
• Workplace flexibility where permitted by position, customer, security, and mission requirements.
• Employee assistance and wellness programs, including available fitness-related benefits and discounts.
• Competitive compensation and a comprehensive employee benefits package.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed