ME00619-ISSE 2

Momentum Engineering, Inc.•Annapolis Junction, MD

44d•$130,000 - $180,000

About The Position

Seeking an experienced Information Systems Security Engineer (ISSE) to support mission-critical Department of Defense (DoD) and Intelligence Community (IC) programs. The successful candidate will provide cybersecurity engineering, security architecture, vulnerability management, risk assessment, and security compliance support for complex enterprise and cloud-based information systems. This position is responsible for ensuring systems are designed, implemented, and maintained in accordance with federal cybersecurity policies, Risk Management Framework (RMF) requirements, and DoD Information Assurance (IA) standards while protecting sensitive and classified information. The ideal candidate possesses extensive experience performing security engineering, vulnerability assessments, system security design, and security compliance activities within highly secure environments.

Requirements

Must have active Top Secret/SCI clearance with NSA Full Scope Polygraph
Minimum of fourteen (14) years of experience as an Information Systems Security Engineer (ISSE) supporting programs of similar scope, complexity, and technical environment
Bachelor's degree in Computer Science, Information Assurance, Information Systems Security Engineering, Cybersecurity, or a related technical discipline
Four (4) additional years of directly related ISSE experience may be substituted in lieu of the degree requirement
DoD 8570.01-M IASAE Level II certification compliance is required
Certified Information Systems Security Professional (CISSP) certification is required
Experience conducting vulnerability management using Tenable Security Center, Nessus, and enterprise vulnerability assessment tools
Experience performing technical security assessments of cloud, enterprise, and distributed computing environments
Strong understanding of the Risk Management Framework (RMF), NIST Special Publications, CNSS policies, and DoD cybersecurity requirements
Experience performing security planning, risk assessments, security control implementation, and risk management
Experience designing secure enterprise architectures supporting multiple security domains and classification levels
Knowledge of network security, system hardening, access control, identity management, encryption, and secure communications
Experience developing security recommendations and mitigation strategies for complex information systems
Strong analytical, troubleshooting, documentation, and communication skills
Ability to collaborate effectively with multidisciplinary engineering and cybersecurity teams

Nice To Haves

Experience supporting Authorization to Operate (ATO) packages and security authorization activities
Experience with Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), and vulnerability remediation
Familiarity with cloud security architectures supporting AWS, Azure, or hybrid cloud environments
Experience supporting continuous monitoring programs and enterprise cybersecurity operations
Knowledge of Zero Trust Architecture (ZTA), Identity and Access Management (IAM), and secure cloud technologies
Experience working within Agile, DevSecOps, or secure software development environments
Familiarity with Security Information and Event Management (SIEM) platforms such as Splunk or Microsoft Sentinel
Experience supporting Department of Defense or Intelligence Community cybersecurity programs

Responsibilities

Perform Information Systems Security Engineering (ISSE) activities supporting the design, implementation, accreditation, and sustainment of secure information systems.
Conduct vulnerability management utilizing enterprise security tools including Tenable Security Center, Nessus, and related vulnerability assessment platforms.
Perform and review technical security assessments of enterprise and cloud-based computing environments to identify vulnerabilities, security weaknesses, and non-compliance with applicable cybersecurity policies and standards.
Analyze security findings and recommend mitigation strategies to reduce operational risk and improve overall security posture.
Perform security planning, security assessments, risk analysis, risk management, and cybersecurity engineering activities throughout the system lifecycle.
Design secure system and network architectures supporting multiple security enclaves with varying classification levels and data protection requirements.
Develop system-level security solutions that satisfy mission, operational, and cybersecurity requirements.
Support implementation of trusted relationships among interconnected systems, external networks, and enterprise architectures.
Evaluate security controls and recommend technical solutions that align with Risk Management Framework (RMF), NIST, Committee on National Security Systems (CNSS), and DoD cybersecurity requirements.
Support system authorization activities by developing and maintaining cybersecurity documentation, security artifacts, and accreditation packages.
Collaborate with systems engineers, software developers, network engineers, and program management to integrate security throughout the system development lifecycle.
Assist with security testing, validation, continuous monitoring, vulnerability remediation, and compliance reporting.
Maintain technical documentation, security assessments, engineering analyses, and risk management documentation.
Stay current on emerging cybersecurity threats, vulnerabilities, technologies, and federal security guidance to improve organizational security posture.