Senior Information Systems Security Engineer (ISSE)

DAn Solutions•Reston, VA

7d•Onsite

About The Position

The Senior Information Systems Security Engineer (ISSE) will provide technical expertise to ensure network systems meet DIA C&A and IA requirements, and are properly certified and accredited. This full-time role is onsite at the customer's location and will cover classified programs and Special Access Programs (SAP). The ISSE will design, develop, and recommend integrated security system and physical control solutions to protect proprietary/confidential data and systems. Responsibilities include assisting the team in DIA's Authorization and Accreditation (A&A) process using RMF throughout the design lifecycle for classified systems, obtaining and maintaining Interim Authorization to Test (IATT), Authority to Connect (ATC), and Authorization to Operate (ATO). The role offers technical engineering services for integrated security systems and solutions, managing information-related risks effectively. The ISSE will collaborate closely with the client during the strategic design process to translate security and business requirements into actionable technical designs, configure and validate secure systems and physical controls, and test security products and systems to detect security weaknesses. Additionally, the ISSE will develop comprehensive system test plans (STP) to assess the security posture of information systems, analyze scan results and security findings to prioritize remediation efforts and implement corrective measures, and participate in incident response activities to resolve security incidents.

Requirements

Requires an active/existing TS/SCI with CI Polygraph
Exhibits advanced Windows administration capabilities and Linux proficiency for optimal system management
Security credentials, certifications, and experience commensurate with the job description
Practical experience deploying, maintaining, and troubleshooting security tools
Demonstrates the ability to critically assess current practices, identify deficiencies, propose innovative solutions, and effectively implement these improvements
Thrives in a fast-paced, complex environment; displays exceptional poise and an unwavering commitment to hard work
Displays excellent problem-solving abilities and attention to detail
Experience with each of the following security tools: Assured Compliance Assessment Solution (ACAS), Trellix, Splunk, and Security Technical Implementation Guide (STIG)'s
A Bachelor's Degree from an accredited institute in an area applicable to this position and four (4) years of relevant experience
An additional four (4) years of relevant experience may be substituted for the bachelor's degree
Must presently be 8570 compliant (IAT Level 2 preferred); must be 8570 compliant (IAT Level 2) by date of security indoctrination with any necessary continuing education (CE) for certification

Nice To Haves

Familiar with tiered security environments (U, S, TS)
Deep understanding of Trellix antivirus suite of products
Knowledge of Splunk architecture and experience structuring multi-level queries
Windows expert - capable of advanced Powershell scripting and general administrative functions
Experience with one or more commercial government cloud service provider's system accreditation process
Experience as a Cybersecurity Control Assessor for SAP
Experience with Ongoing Authorizations and Assessments
Experience with C2S Cloud, or DevOpsSec

Responsibilities

Provides technical expertise to ensure the network systems meet DIA C&A and IA requirements and are properly certified and accredited
Designs, develops, and recommends integrated security system and physical control solutions that will ensure proprietary/confidential data and systems are protected
Assist team in DIA's Authorization and Accreditation (A&A) process using RMF across the design lifecycle for classified systems obtaining and maintaining Interim Authorization to Test (IATT), Authority to Connect (ATC) and Authorization to Operate (ATO)
Offers technical engineering services for the support of integrated security systems and solutions, managing information-related risks effectively
Works closely with the client during the strategic design process to translate security and business requirements into actionable technical designs
Configures and validates secure systems and physical controls, and tests security products and systems to detect security weakness
Develop comprehensive system test plans (STP) to assess the security posture of the information systems
Analyze scan results and security findings to prioritize remediation efforts and implement corrective measures
Participate in incident response activities and assist in the resolution of security incidents as needed
Collaborate with stakeholders to identify security requirements and ensure alignment with organizational objectives
Stay abreast of the latest security trends, technologies, and best practices to continually enhance the security posture of the information systems