Information Systems Security Engineer (ISSE)

GreenXT•Philadelphia, PA

About The Position

GreenXT is seeking Information Systems Security Engineers to perform cybersecurity hygiene tasks involved in planning and implementing security measures within Land-Based Test Facilities and aboard Navy vessels, following the Risk Management Framework (RMF). The role supports the United States Navy and involves implementing security controls, maintaining RMF packages, monitoring systems, and assessing compliance and vulnerabilities.

Requirements

Bachelor’s degree in Computer Science.
Active DoD Secret-level security clearance, or the ability to obtain one upon position acceptance.
Five years of related experience in data security administration.
Active CompTIA Security+ certification.
Ability to lift, carry, and transport heavy equipment and boxes weighing at least 30 pounds.
Ability to work on and climb ladders, aboard ships, in shipyards, under industrial conditions, and in confined spaces.
Willingness to travel within and outside the continental United States.

Nice To Haves

Advanced knowledge of data security administration principles, methods, and techniques.
Knowledge of operating system hardening and remediation in accordance with DISA Security Technical Implementation Guides (STIGs).
Information assurance or information security experience with National Security Systems, including U.S. Navy shipboard and land-based Combat Systems, Hull, Mechanical, and Electrical systems, or Industrial Control Systems in a U.S. Navy environment.
Ability to evaluate risk and threat analyses of vulnerabilities and exploits as they apply to U.S. Navy shipboard and land-based Combat Systems, Hull, Mechanical, and Electrical systems, or Industrial Control Systems in a U.S. Navy environment.
Knowledge of DoDI 8500.2 Information Assurance Control implementation and validation from a systems engineering perspective, as applied to National Security Systems.
Experience with UNIX and Linux variants.
Knowledge of Microsoft Networking in the context of system hardening.
Knowledge of the Microsoft Windows OS registry.
Proficiency in Microsoft Office suite applications.

Responsibilities

Assist with implementation of countermeasures or mitigating controls.
Create, submit, and validate Risk Management Framework (RMF) packages in accordance with NIST 800-53.
Protect the integrity of networks, systems, and applications by technically enforcing organizational security policies and monitoring vulnerability and scanning devices.
Use Enterprise Mission Assurance Support Service (eMASS).
Perform periodic and on-demand system audits and vulnerability assessments, including reviews of user accounts, application access, file systems, and external Web integrity scans, to determine compliance.
Prepare incident reports documenting analysis methodology and results.
Provide guidance and work leadership to less experienced technical staff; may have supervisory responsibilities.