Senior Specialist, Information Security Systems Engineer (ISSE)

L3HHCM20•Clifton, NJ

8d•Onsite

About The Position

As an Information Systems Security Engineer, you will safeguard critical systems and networks by applying cutting-edge security engineering methods, practices, and technologies throughout the entire system lifecycle. Working in close partnership with customers, you will identify, define, and implement security requirements with precision and rigor, ensuring that protection needs are addressed early and maintained sustainably to achieve security authorization. You will collaborate with system developers and commercial vendors to architect and evaluate state-of-the-art secure systems, networks, and databases, leveraging advanced technologies such as encryption, vulnerability analysis, and security management tools. Your role involves integrating multiple security methods into a cohesive system security perimeter and environment, while developing and implementing the policies and procedures necessary to monitor and maintain that environment. You will prepare comprehensive Certification and Accreditation documentation aligned with industry standards including NIST 800-37, High Assurance Cryptography, and Anti-Tamper requirements to achieve and maintain system security authorization. Additionally, you will serve as the primary security advocate in customer meetings, effectively communicating program security needs, concerns, and requirements to both technical and non-technical stakeholders.

Requirements

Bachelor’s Degree and minimum 6 years of prior relevant experience.
Graduate Degree and a minimum of 4 years of prior related experience.
In lieu of a degree, minimum of 10 years of prior related experience.
Minimum of Collateral Secret security clearance required.
Must be able to obtain and maintain a DOD 8140 certification (or NIST 800-181), appropriate for the position within 6-months of start
Experience using DoD 5200.39 in identifying and protecting critical program information (CPI).
Experience in Engineering trustworthy and secure systems IAW NIST 800-160.
Experience in DoD software selection and approval processes for COTS, GOTS and FOSS
Experience with Security Testing and Verification
Work is to be accomplished 100% onsite, in a lab environment, no options for remote support

Nice To Haves

Experience in configuration and use of cyber defense and vulnerability assessment tools such as ACAS and SCC.
Active TS/SCI Clearance is highly desired

Responsibilities

Lead the development and implementation of  Anti-Tamper (AT) throughout the System Development Lifecycle. Key tasks include
Assessing systems for Critical Program Information
Conducting trade studies
Developing AT requirements
Implementing security architectures
Assessing threats via attack/countermeasure analysis
Conducting Verification and Validation activities.
Serve as a SME in the area of AT.
Draft Program Protection Implementation Plans (PPIPs), Cybersecurity Strategies, Security Classification Guides (SCGs),  and AT Plans
Interact with customer to define AT requirements, solutions, trades, costs, implementation, system impacts, and effectiveness
Support security engineering activities, including basis of estimate development, requirements development, design, test, configuration management and maintenance of information systems and data
Assist program security in the development of policies and procedures for emerging security technologies
Support the evaluation, qualification, testing and delivery of security architecture improvement, obsolescence replacement and vulnerability response projects