Information Systems Security Engineer (ISSE) - TS/SCI with Polygraph

GD Information Technology•Herndon, VA

30d•Onsite

About The Position

A career as an ISSE at GDIT means owning every opportunity to help support and advance our clients’ missions. At GDIT, cyber security is embedded into every aspect of what we do and we’re constantly evolving our cyber solutions to overcome our clients’ biggest challenges. At GDIT, people are our differentiator. As an ISSE, you will help ensure today is safe and tomorrow is smarter. We are seeking an experienced ISSE capable of working within Xacta, Greenlight, Rapid7 and assigned onsite Information System Security Managers to maintain and renew system security accreditations. Successful candidate must be able to prioritize multiple projects and move applications seamlessly through the accreditation process.

Requirements

10+ years of related experience.
Experience with Xacta, GreenLight, and Risk Management Framework (RMF) processes (Rev4 and Rev5).
On-the-job knowledge and experience cloud security design, requirements analysis, control implementation, and mitigation.
Experience securing applications in a cloud environment such as Amazon Web Service.
On-the-job knowledge and experience with Assessment and Authorization (A&A) policy and guidance to include ICD-503, FISMA and RMF/A&A processes, NIST SP (including but not limited to 800-27, 800-30, 800-37, 800-53, 800-60, 800-137, 800-144, and 800-145), FIPS (199, 200), CNSSI 1253 technical controls, and developing and maintaining associated certification and accreditation assessment and authorization documentation for systems.
On-the-job knowledge and experience with performing security system scans for network, platform, database, and web services using different security tools (e.g. Nessus Rapid7, Weblnspect, AppDetective).
Outstanding interpersonal skills and team player.
Outstanding written and verbal communication skills.
Demonstrated outstanding ability to produce quality deliverables and to complete assigned projects on time, provide consistent status updates to ensure IT security projects stay focused.
Demonstrated outstanding attention to detail - completes tasks per standard operating procedures; reports discovered anomalies and inconsistencies.
Demonstrated outstanding persistent and creative problem solver - strong troubleshooting skills and determined to find solutions to technical problems; identifies root cause and presents possible solutions to management.
Demonstrated outstanding work ethic and a proven professional - respectful, dependable, takes initiative.
TS/SCI + Polygraph clearance.
Bachelor’s degree in Computer Science, Engineering, or a related technical discipline, or the equivalent combination of education, technical certifications or training, or work experience.

Nice To Haves

Experience with developing and reviewing security concept of operations, systems security plans, security control assessments, contingency plans, configuration management plans, incident response plans, plan of actions and milestones, risk management plans, vulnerability scanning, and/or vulnerability management plans.
CISSP certification.
CASP certification.
Experience with cloud security design, requirements analysis, control implementation, and mitigation.
Experience with JIRA and managing security based requirements.
Project or program management experience.

Responsibilities

Maintain and renew system security accreditations.
Prioritize multiple projects.
Move applications seamlessly through the accreditation process.
Develop and review security concept of operations, systems security plans, security control assessments, contingency plans, configuration management plans, incident response plans, plan of actions and milestones, risk management plans, vulnerability scanning, and/or vulnerability management plans.
Perform security system scans for network, platform, database, and web services using different security tools (e.g. Nessus Rapid7, Weblnspect, AppDetective).
Present reports to management.
Work with developers and engineers to determine appropriate mitigations to vulnerabilities.
Produce quality deliverables.
Complete assigned projects on time.
Provide consistent status updates to ensure IT security projects stay focused.
Complete tasks per standard operating procedures.
Report discovered anomalies and inconsistencies.
Troubleshoot and find solutions to technical problems.
Identify root cause and present possible solutions to management.

Benefits

401K with company match
Comprehensive health and wellness package
Internal mobility team dedicated to helping you own your career
Professional growth opportunities including paid education and certifications
Cutting-edge technology you can learn from
Paid vacation and holidays
Variety of medical plan options, some with Health Savings Accounts
Dental plan options
Vision plan
401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
Full flex work weeks where possible
Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
Short and long-term disability benefits
Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.