Information Systems Security Engineer #1628132

Network Designs•Philadelphia, PA

3d•Onsite

About The Position

The Information Systems Security Engineer (ISSE) will provide cybersecurity and information assurance support to a major DoD IT Operations Division. The role involves executing comprehensive security processes encompassing Risk Management Framework (RMF) and ensuring compliance across various networks. The ISSE will identify, refine, and implement appropriate security measures for DoD IT systems, including those for ship and submarine technology.

Requirements

U.S Citizenship required.
This role is fully onsite (5days / week) in Philadelphia, PA.
Current Secret Clearance or higher clearance required.
Bachelor's degree in Computer Science, Information Technology, or a related STEM field from an accredited college or university.
Seven (7) years of professional experience in capturing and refining information security operational requirements and executing security controls.
Experience in vulnerability scanning, implementing security configurations, and managing software/hardware updates is essential.
Certifications (At least one is required): CASP+ CE CCNP Security CISA CISSP (or Associate) GCED GCIH CCSP

Nice To Haves

Proficiency with cybersecurity tools (e.g., ACAS, SCC).
Experience in implementing and maintaining DoD RMF processes.
Strong understanding of STIG, SRG, and associated security protocols.
Exceptional problem-solving and decision-making abilities.

Responsibilities

Develop, maintain, and track Risk Management Framework (RMF) system security plans.
Execute RMF processes to obtain and maintain Interim Authority to Test (IATT), AO approval, ATO, and DATO.
Identify and tailor IT and Cyber Security control baselines based on RMF guidelines.
Perform Ports, Protocols, and Services Management (PPSM).
Conduct IT and CS vulnerability-level risk assessments.
Mitigate and remediate IT and CS system-level vulnerabilities per STIG requirements.
Develop and maintain system-level IT and CS policies and procedures.
Implement and assess Security Technical Implementation Guides (STIG) and Security Requirements Guide (SRGs).
Perform regular vulnerability assessments using tools such as ACAS, SCC, and Evaluate STIG.
Deploy security updates and conduct routine audits of IT system components.
Assist in the removal and disposal of critical components in accordance with security protocols.
Provide cybersecurity patching and support configuration change documentation.
Participate in cross-functional teams to facilitate project support and compliance objectives.
Support cyber compliance of assets within enterprise IT network environments, including Windows servers and CISCO networking hardware.