Information Systems Security Engineer (ISSE)

E-Infosol•Huntsville, AL

2d•Onsite

About The Position

The Information Systems Security Engineer (ISSE) supports the security, compliance, and authorization of information systems by implementing and assessing security controls, managing security documentation, and supporting the Risk Management Framework (RMF) process. This role works closely with System Owners, ISSOs, ISSMs, and Authorizing Officials to ensure systems meet security requirements, address vulnerabilities, and maintain accreditation. Responsibilities include reviewing security scans, developing security policies and procedures, implementing and maintaining security technologies, responding to cybersecurity incidents, and supporting cloud and enterprise environments.

Requirements

Active Top Secret clearance
7+ years of experience with modern networks, operating systems, databases, and virtual computing (Bash, Linux, or UNIX)
Expert technical knowledge in security engineering and IT systems engineering.
Experience with SAML Development Software use (Oracle Java, Perl, and Python)
Experience with SQL
AWS Cloud Services

Nice To Haves

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent experience.

Responsibilities

Support the System Owner by working with or as the system ISSO to complete the security controls, provide artifacts, review the plans, create POAMs and help with using the GRC.
Test the controls, review the scans and create any authorization docs (ECs).
Develop and oversee the implementation of information security procedures and policies.
Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information.
Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures.
Monitor and respond to computer security breaches, viruses, and intrusions.
May oversee the assessment of information security systems.
Respond to security requirements levied by the ISSM, AODR, and AO during the Security Assessment and Authorization process.