Isse

Prodigy One•Annapolis Junction, MD

6d•$124,000•Onsite

About The Position

Prodigy One, LLC. is seeking an Information Systems Security Engineer to validate and verify system security requirements and establish security designs for large-scale systems, major system elements, and interfacing systems in geographically distributed network environments. The role identifies and implements information security architectures and functionality, recommends technical solutions and standards, and assesses and mitigates security threats and risks throughout the program life cycle. The engineer leads or contributes to security planning, assessment, risk analysis and management, certification, and awareness activities. The role works with system engineering, test engineering, integration, and development teams to ensure architectures and implementations meet security requirements; assesses compliance with security policies; evaluates security solutions and the impact of new development on operational security; and reviews and tests critical software. Responsibilities also include security configuration audits and management, policy enforcement, security compliance requirements for new system features, vulnerability remediation, continuous monitoring, and security verification testing of relevant Type 1 devices. The engineer serves as a security architecture subject matter expert and communicates with program managers and customer technical points of contact as needed. Participation in Program Increment Planning and other agile team activities is expected. An active TS/SCI clearance with polygraph is required. The position is located in Annapolis Junction, Maryland. The posted salary range is $124,000–$185,000+, with compensation determined by experience, education, certifications, qualifications, and benefit selections.

Requirements

At least 12 years of experience working as an ISSE on a large technical program.
Active TS/SCI clearance with polygraph.
Solid understanding of security practices and policies, and hands-on vulnerability testing experience using customer tools.
Experience applying the Risk Management Framework.
Experience formulating and assessing IT security policy.
Knowledge of and experience with common security tools such as Nessus, NMAP, and Wireshark.
Experience with hardware and software security implementation, communication protocols, encryption techniques and tools, and web services.
Experience with secure configurations of commonly used desktop and server operating systems.
Ability to work on multiple systems and components simultaneously in various configurations.
Strong verbal and written communication skills.
Commitment to adopting and adhering to best practices.
Ability to plan and prioritize tasks and communicate technical options and trade-offs clearly.
Ability to produce high-quality work independently and collaboratively in a fast-moving environment.
Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline.

Nice To Haves

Five years of experience with Defense in Depth principles and technology, including access control, authorization, identification and authentication, public key infrastructure, and network and enterprise security architecture, and applying risk assessment methodology to system development.
DoD 8570 compliance with IASAE Level 2 or 3.
Information Systems Security Engineering Professional (ISSEP) certification.
Computer Information Systems Security Professional (CISSP) certification.
Experience developing or implementing integrated security services management processes, including network penetration testing assessment and auditing, anti-virus planning assistance, risk analysis, and incident response.
Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls encompassing development, design, and implementation.
Experience with penetration testing tools.
Experience with scripting languages.

Responsibilities

Validate and verify system security requirements and establish security designs for large-scale systems and complex distributed network environments.
Identify and implement information security architectures and functionality that ensure consistent application of security policies and enterprise solutions.
Recommend and develop technical solutions, products, and standards based on current and desired system security architecture.
Assess and mitigate system security threats and risks throughout the program life cycle.
Lead or contribute to security planning, assessment, risk analysis and management, certification, and awareness activities.
Collaborate with internal technical experts and communicate significant security issues to program managers and customer organization points of contact as needed.
Participate in Program Increment Planning and related agile team activities.
Work with system engineering, test engineering, and integration teams to ensure hardware and software architecture and implementation meet security requirements.
Assess system implementation against security compliance policies and recommend and implement enhancements.
Evaluate security solutions against customer requirements and assess the operational security impact of new development.
Evaluate, review, and test critical software.
Propose, assess, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
Audit and assess system security configuration settings using common methodologies and tools.
Manage and enforce security strategies and policies affecting geographically distributed system components.
Provide configuration management for security-relevant information system software.
Serve as a security architecture subject matter expert and advise program managers, customer technical experts, and internal teams.
Formulate security compliance requirements for new system features and identify and remediate security issues throughout the system.
Support risk assessment and management, security control assessment, continuous monitoring, service design, and other information assurance program functions.
Work with development teams to improve understanding of vulnerabilities, attack vectors, and remediation approaches.
Plan and conduct security verification testing of relevant Type 1 devices.