Information System Security Engineer (ISSE) II

General Dynamics Information Technology is seeking an Information System Security Engineer (ISSE) II to provide information system security engineering across the lifecycle, including future requirement scoping and the integration of security requirements into organizational or upgraded information systems. This onsite position in Colorado Springs supports Collateral, SCI, and Special Access Program (SAP) activities for DoD agencies.

Key Responsibilities

• Oversee the development, implementation, and evaluation of information system security program policy, with special emphasis on integrating existing SAP network infrastructures.
• Conduct network security analysis aligned to the Risk Management Framework (RMF), emphasizing the Joint Special Access Program Implementation Guide (JSIG) authorization process.
• Provide expert support, research, and analysis for exceptionally complex information security problems and associated processes.
• Deliver expert-level consultation and technical services across information security disciplines.
• Serve as a technical expert to the Cybersecurity Assessment Program by providing technical direction, interpretation, and alternatives for complex issues.
• Build information assurance (IA) into systems deployed to operational environments.
• Assist system architects and developers with identifying and implementing information security functionality to support uniform application of DoD and other agency security policy and enterprise solutions.
• Enforce design and implementation of trusted relations among external systems and architectures.
• Assess and mitigate security threats and risks throughout the program life cycle, supporting security planning, assessment, risk analysis, risk management, certification, and awareness for system and networking operations.
• Independently address unusually complex technical problems using advanced technical principles, theories, and concepts, with strong written and oral communication skills.
• Contribute to the development of new principles, concepts, and methodologies, including innovative and highly effective solutions.
• Recommend cybersecurity software tools and assist with software tool requirements, selection criteria, and development of product-specific STIGs from applicable DISA SRGs.
• Review ISSE-related designs and provide security compliance recommendations.
• Lead technical teams in implementation of predetermined long-range goals and objectives.
• Support customer and SAP community IA working groups and participate in SSE IPT reviews.
• Provide IA risk management recommendations to the customer.
• Provide ISSE support for Mission and Training systems design and development.
• Assist with development and maintenance of the Program Protection Plan and participate in site activation activities and design reviews.
• Represent the customer in ISSE-related working groups, advisory groups, and advisory council meetings, including chairing or co-chairing IA working groups with the SAP community and participating in ISSE IPT reviews.
• Maintain coordination with System Engineering (SE), supporting system security design, interoperability, and related engineering responsibilities while applying cybersecurity policy and system security engineering processes.
• Maintain a strong background in Patch/Configuration management, DevOps, and tier 3 support.
• Design, integrate, and implement JSIG/RMF Continuous Monitoring tools and processes.
• Integrate COTS and GOTS products to collect, display, and remediate automated system security and system operations/performance functions and metrics.
• Perform security assessments of servers, network devices, and security appliances.
• Develop improvements to security assessments focused on accuracy and efficiency.
• Integrate ancillary monitoring tools/capabilities with enterprise SIEM and create tailored event alarms/rules and summary reports.
• Write and execute cybersecurity test procedures to validate control compliance.
• Monitor and analyze cybersecurity tool outputs for reportable security incidents and residual risk.
• Analyze technical risk associated with emerging cybersecurity tools and processes.
• Support security incident response team activities as needed.
• Build Operations and Maintenance (O&M) checklists (daily, weekly, monthly, yearly) and develop Tactics, Techniques and Processes (TTPs) and Standard Operating Processes (SOPs) associated with service checklists.
• Integrate or develop techniques to improve confidentiality, integrity, and availability for networks and systems operating at various classification levels.
• Lead teams of System Security Engineers and Cybersecurity Analysts responsible for protecting national and international security interests as support equipment is designed and tested.
• Chair and co-chair customer and SAP community IA working groups and participate in ISSE IPT reviews.

Requirements

• 12+ years related experience (2+ years SAP experience required).
• Prior performance in roles such as ISSO, ISSM, SCA, or SAP IT Technical Director.
• Bachelor’s degree in a related discipline OR Associate’s degree in a related area plus 2 years’ experience OR equivalent experience (4 years).
• IAAE Level I or Level II required within 6 months of hire (CASP+ CE, CISSP (or Associate), CSSLP).
• TS/SCI required; must be able to attain TS/SCI with CI Polygraph.
• U.S. Citizenship required.
• Certifications: CSSLP (ISC)2; CASP CE+ (CompTIA); CASP+CE (CompTIA).

Technologies

• Risk Management Framework (RMF), Joint Special Access Program Implementation Guide (JSIG), Cybersecurity Assessment Program, DISA SRGs, STIGs, Continuous Monitoring
• Information assurance and security concepts, including mandatory and role-based access control concepts (e.g., SE Linux extensions to RHEL, PitBull, AppArmor, Sentris)
• SIEM and monitoring: SIEMs, LogRhythm
• Security assessment and vulnerability tools: ACAS/Nessus/SCAP, forensic analysis, vulnerability assessment
• Platforms and infrastructure: Microsoft Windows Server, Active Directory, Red Hat Enterprise Linux, Microsoft Hyper-V, VMware ESXi, Xen hypervisors
• Networking and controls: enterprise networking, firewalls, intrusion detection, intrusion prevention systems, Group Policy management
• Configuration and patching: Patch/Configuration management, configuration, scripting
• Operational tooling: BMC Footprints, WSUS, Lumension, BitLocker, OS and enterprise security processes
• Database and web security: SQL Server 2012, Oracle/MS SQL database security, TomCat, IIS, Apache/IIS Web server security
• Additional tools and environments listed: Windows Server 2012r2/2016, Win 10, Red Hat 6.5, Microsoft Office Toolkits, mandatory access control concepts, video teleconferencing/VOIP, SE Linux extensions to RHEL
• Operations and maintenance processes: O&M checklists, TTPs, SOPs

Location and Work Details

• Colorado Springs, Colorado
• Onsite workplace
• Travel required: 10–25%
• Requisition #: RQ230157

Clearance

• Top Secret/SCI

Compensation

The likely salary range for this position is $166,005 - $224,595 per year. Salary will be set based on experience, geographic location, and possibly contractual requirements and could fall outside of this range.