INFORMATION SECURITY ENGINEER

IntellectFaces is seeking an Information Security Engineer in Annapolis, MD (onsite) to support security testing, risk management, and IT policy activities. The role requires TS/SCI Full Scope Polygraph clearance and hands-on experience applying common security tools and secure configurations across desktop and server operating systems.

Role Summary

Serve as an Information Security Engineer with a focus on vulnerability testing, security policy and risk management. The position calls for practical experience using established security tools and knowledge of security practices, policies, and best practices in fast-moving operational environments.

Key Responsibilities

• Apply security practices and policies while performing hands-on vulnerability testing using customer tools.
• Use the Risk Management Framework in support of risk-related activities.
• Formulate, assess, and evaluate IT security policy.
• Work across multiple systems and components simultaneously, supporting various configurations.
• Adhere to security best practices and consistently maintain compliance with established requirements.
• Plan and prioritize tasking effectively and communicate clearly about technical options and trade-offs.
• Deliver high-quality work independently and as part of a team in a fast-moving environment.

Required Qualifications

• Hold TS/SCI Full Scope Polygraph through MD Customer. Last poly must be within the past 6 years; no CCAs.
• Demonstrated knowledge and hands-on experience with common security tools, including Nessus, NMAP, and Wireshark.
• Experience with hardware/software security implementation across communication protocols, encryption techniques/tools, and web services.
• Experience implementing secure configurations for commonly used desktop and server operating systems.
• Strong verbal and written communication skills.
• Ability to plan and prioritize tasking and communicate clearly regarding technical options and trade-offs.
• Solid understanding of security practices and policies, including hands-on vulnerability testing experience using customer tools.

Technology and Skills

• Nessus, NMAP, Wireshark
• Encryption techniques/tools, web services
• Penetration testing tools, scripting languages
• Public key infrastructure (PKI)
• Network and enterprise security architecture
• Penetration testing tools and related security implementation capabilities

Preferred Qualifications

• Five (5) years of experience with Defense in Depth principles/technology (including access control, authorization, identification and authentication, public key infrastructure, and network and enterprise security architecture) and applying risk assessment methodology to system development.
• DoD 8570 compliance with IASTAE Level 2 or 3.
• ISSEP Certification.
• CISSP Certification.
• Experience developing and implementing integrated security services management processes, including assessing and auditing network penetration testing, assisting with anti-virus planning, performing risk analysis, and supporting incident response.
• Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls that include development, design, and implementation.
• Experience with penetration testing tools.
• Experience with scripting languages.

Education and Experience

• Minimum experience: 5 years.
• Education: Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related disc.