Information Systems Security Engineer

Amyx, Inc. is seeking Information Systems Security Engineers to support the US Transportation Command (TRANSCOM) Senior Information Security Officer (SISO) contract at Scott Air Force Base, IL.

Responsibilities

• Perform risk assessments to determine risk from integrating new systems or capabilities into the USTRANSCOM environment.
• Gather supporting data for RMF requirements from other DoD/Federal organizations, vendors, or Internet research as needed.
• Conduct risk assessments using NIST SP 800-30 (Guide for Conducting Risk Assessments) and NIST SP 800-160 Vol I and Vol II principles, plus security best practices.
• Maintain current ISSE process and procedure documentation and support contract deliverable generation and delivery.
• Implement security controls aligned with applicable ICDs, NISP, NIST, and governing government regulations and local facility procedures.
• Conduct ongoing vulnerability testing to verify security features and operating controls are functional, effective, and meet government standards.
• Coordinate with internal and external customers and/or government security officials to execute security duties and address routine information security matters with employees.
• Communicate accurate information to support security activities and stakeholder needs.

Requirements

• Minimum 5 years of related experience.
• Secret security clearance.
• DoD 8570 IAT-II certification.
• Proficiency with computer applications and testing tools, including Word, Excel, PowerPoint, DISA STIG Viewer, Nessus, and similar tools.
• Experience supporting the certification and accreditation process for information systems, including the ability to write, review, and coordinate system security plans.
• Excellent written and verbal communication, including presenting material to senior DoD and non-DoD officials.
• Ability to communicate effectively with senior leaders and customers to clearly present technical approaches and findings.

Technologies / Tools

• RMF
• NIST
• DevSecOps
• SSH
• HBSS
• NIST SP 800-30
• NIST SP 800-160 Vol I
• NIST SP 800-160 Vol II
• Word, Excel, PowerPoint
• DISA STIG Viewer
• Nessus

Desired Skills

• BA/BS degree from an accredited university.
• Demonstrated knowledge and understanding of the USTRANSCOM mission.
• IAM-II or greater certification.

Physical Demands

• Sit at a workstation for extended periods; use hands to handle or feel objects/tools/controls; reach with hands and arms; talk and hear.
• Ability to work on a desktop or laptop computer for extended periods for reading, reviewing/analyzing information, and producing written recommendations, summaries, and/or reports.
• Communicate effectively with others verbally and in writing.
• May be required to occasionally lift or move moderate amounts of weight, typically less than 20 pounds.
• Regular and predictable attendance is essential.

Benefits

• Medical, Dental, and Vision Plans (PPO & HSA options available)
• Flexible Spending Accounts (Health Care & Dependent Care FSA)
• Health Savings Account (HSA)
• 401(k) with matching contributions
• Roth
• Qualified Transportation Expense with matching contributions
• Short Term Disability
• Long Term Disability
• Life and Accidental Death & Dismemberment
• Basic & Voluntary Life Insurance
• Wellness Program
• PTO
• 11 Holidays
• Professional Development Reimbursement

Job Overview

• Amyx is seeking several Information Systems Security Engineer (ISSE) personnel to support the US Transportation Command (TRANSCOM) Senior Information Security Officer (SISO) contract at Scott Air Force Base, IL (onsite).
• Support USTRANSCOM risk management processes by assessing potential risks, mitigation measures, residual risks, and providing Security Risk Assessment recommendations to the Government.
• Research and advise the SISO and other Government staff on recently developed countermeasures to protect command systems from new threats.
• Assist in development, implementation, and administration of effective security programs for Government approval.
• Provide guidance, cyber alerts, and best practice information to appropriate audiences.