Information Systems Security Engineer (ISSE) - TS/SCI Poly required

Emtak•Annapolis Junction, MD

About The Position

We are seeking an experienced Information Systems Security Engineer (ISSE) to support a high-priority Intelligence Community / DoD mission. The ISSE will provide hands-on security engineering and assessment support across complex computing, networking, and enclave environments.

Requirements

12 years of ISSE experience supporting programs and contracts of similar scope, type, and complexity.
Recent experience within the last 5 years applying cybersecurity principles and technologies, including: Access control, Authorization, Identification and authentication, PKI, Network security, Enterprise security architecture.
DoD 8570 / IASAE Level 2 compliance required.

Nice To Haves

TS/SCI Poly required

Responsibilities

Perform and/or review technical security assessments of computing and network environments to identify vulnerabilities, security gaps, and non-compliance with applicable IA/security standards and regulations.
Develop mitigation strategies and support the resolution of identified security risks.
Validate and verify system security requirements and contribute to system security architecture and design.
Design, develop, implement, and integrate information assurance and cybersecurity solutions across computing, networking, and enclave environments, including multi-enclave environments with differing data protection and classification requirements.
Build security controls and IA requirements into systems throughout the engineering and deployment lifecycle.
Work with architects and system developers to identify and implement appropriate security functionality consistent with agency security policies and enterprise security solutions.
Support the development and implementation of security architectures and trusted relationships between external systems and architectures.
Assess and mitigate cybersecurity threats and risks throughout the system/program lifecycle.
Support security planning, assessment, risk analysis, risk management, authorization, certification, and security awareness activities.
Review security authorization and certification documentation for completeness, accuracy, and compliance.
Apply security engineering expertise across areas including: Security architecture and engineering lifecycle, Identity, authentication, authorization, and access control, PKI and cryptographic solutions, Cross-domain solutions, Network and enterprise security, System integration and security testing, Risk management and vulnerability mitigation, Intrusion detection and incident handling, Configuration and change management, Auditing and security assessments, Contingency planning, Security authorization / certification.
Support security authorization activities in accordance with NSA/CSS NISCAP, DoD RMF, NIST RMF , and applicable NSA/CSS security engineering processes.