Information Systems Security Engineer Level 3 – Isse 3

Information Systems Security Engineer Level 3 – Isse 3

Requirements

• 20 years experience as an Information System Security Engineer
• Versed in principles of IA including confidentiality, integrity, non-repudiation, availability, and access control
• Experience supporting security authorization activities in compliance with NSA/CSS Information System Certification and Accreditation Process (NISCAP)
• Experience supporting security authorization activities in compliance with DoD Risk Management Framework (RMF)
• Experience supporting security authorization activities in compliance with NIST Risk Management Framework (RMF)
• Experience supporting NSA/CSS business processes for security engineering
• Experience interacting directly with the customer and other project team members
• Experience generating system-level solutions to resolve security requirements
• Experience developing functional and secure system architectural design plans
• Bachelor’s Degree in Computer Science, Information Assurance or Information Security System Engineering required
• Master’s Degree Computer Science, Information Assurance or Information Security System Engineering may be substituted for two (2) years of experience
• Four (4) years of additional ISSE experience may be substituted for a Bachelor’s degree

Responsibilities

• Perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies.
• Validate and verify system security requirements definitions and analysis, and establish system security designs.
• Design, develop, implement, and/or integrate IA and security systems and system components, including those for networking, computing, and enclave environments, including those with multiple enclaves and differing data protection/classification requirements.
• Support the building of security architectures.
• Enforce the design and implementation of trusted relations among external systems and architectures.
• Assess and mitigate system security threats/risks throughout the program life cycle.
• Apply system security engineering expertise in one or more of the following: system security design process, engineering life cycle, information domain, cross-domain solutions, COTS and GOTS cryptography, identification, authentication, and authorization, system integration, risk management, intrusion detection, contingency planning, incident handling, configuration control and change management, auditing, certification and accreditation processes.

Preferred Qualifications

No preferred qualifications provided.