Information Systems Security Engineer (ISSE) -TS/SCI

Sunayu•Arlington, VA

2d•$112,000 - $145,000•Onsite

About The Position

Sunayu, LLC is searching for an Information Systems Security Engineer (ISSE) to provide cyber security and security engineering services for the National Military Command Center (NMCC) customer including system security engineering, cybersecurity risk assessments, and security architecture support. The ISSE shall perform, or review, technical security assessments of computing environments to identify points of vulnerability, noncompliance with established cybersecurity standards and regulations and recommended mitigation strategies.

Requirements

Qualified candidates must possess a TS/SCI security clearance.
Security+
5+ years of experience in understanding all aspects of systems engineering, including design and architecture.
Demonstrated capability to identify security risks throughout information system network structures to include the Operating Systems, hardware, and various data transfer protocols.
Effective communication and presentation skills (i.e., ability to present ideas effectively in formal and informal situations in group and individual settings).
Strong planning, organizational, and time management skills (i.e., ability to effectively plan, organize, and prioritize work, and to control and follow up to assure work completion).
Demonstrated initiative (i.e. initiate appropriate action without being directed) and ability to work independently.

Responsibilities

Responsible for building, deploying and Patching HBSS Windows and ACAS RedHat Linux 7.9 and 8 servers.
Responsible for building, maintaining, and patching all ePO, Security Center, and Nessus servers.
Provides Security Center accounts for Vulnerability Managers to scan devices within ACAS.
Experience with ACAS scan results and how to remediate vulnerability findings.
Knowledge of the process of obtaining licenses for all HBSS ePO’s and Tenable Security Centers.
Expertise in the process of obtaining HBSS and ACAS kickstart ISOs from DISA.
Extensive knowledge of building virtual servers, deploying, and patching all McAfee modules via the ePO, configuring McAfee policies for each environment STIGing HBSS Windows OS, McAfee policies to comply with benchmarks (Not reviewing or confirming), STIGing ACAS RHEL servers.
Ability to Run SCAP scans on Windows and RHEL servers.
Displays knowledge of updating RedHat 7.9 and 8 as they are released
Setup RedHat yum local rpm repositories to patch offline ACAS servers.
Deploying Rogue sensors on each subnet
Identifying Rogue subnets and, rogue endpoints.
Able to troubleshoot Security Center and Nessus scanner issues.
Design, implement, and maintain complex information technology systems.
To include designing the basic computing infrastructure to accomplish key tasks, establishing networking rules for cybersecurity, and troubleshooting network errors or other technical issues.
Lead the development of technical solutions, from refining customer requirements through design, build, test, and deployment.
Document and communicate technical solutions and results of analyses leading to recommended courses of action.