Information System Security Engineer

Information System Security Engineer

Requirements

• Bachelor’s degree in computer science, information technology, cybersecurity, or a similar discipline.
• Minimum of ten years experience.
• DoD TS/SCI clearance.
• Experience in understanding computer architecture, computer networking, and fundamentals of computer and network security.
• Experience in information security, networking, server administration, and project management.
• The ability to clearly and proactive communicate current or future issues and use a communications plan to mitigate risk.

Responsibilities

• Perform and/or review technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Cyber (e.g. Information Assurance (IA)) standards and regulations and recommend mitigation strategies.
• Provide senior-level security assessment and authorization (A&A) consulting related to the maintenance, upgrade, and technology insertion for a DoD-approved classified network with multiple sites. Specifically, maintain, update, and create new policies/procedures/SOPs and ensure the A&A process utilizing the Risk Management Framework (RMF) within XACTA, eMASS, or other assessment tools, as applicable.
• Assist architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Agency security policy and enterprise solutions. Enforce the design and implementation of trusted relations among external systems and architectures.
• Develop new accreditation approaches to support the rapid deployment of unaccredited applications by supervising the development process (inside development enclaves), the risk assessment process, and the deployment process of these custom-developed applications.
• Support security authorization activities in compliance DoD Risk Management Framework (RMF), the NIST Risk Management Framework (RMF) process, and prescribed customer business processes for security engineering.
• Design, develop, implement, and/or integrate Cyber and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements.
• Assess and mitigate system security threats/risks throughout the program life cycle. Contribute to the security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.

Preferred Qualifications

• Masters Degree in computer science, information technology, cybersecurity, or a similar discipline.
• Prior experience working for SpRCO and/or the DoD.
• Knowledge and experience with the DoD strategic communications systems.
• Certifications from credible institutions that demonstrate a master understanding of architecture, computer networking, and fundamentals of computer and network security.