EngineerJobs.io
← Back to all jobs

Job Description

The Information Systems Security Engineer (ISSE) will support security authorization activities for classified information systems, reviewing risk management documentation and participating in technical compliance reviews, site assessments, and incident response support.

Location

Arlington, VA (Onsite)

Compensation

USD 94,000 - 187,600 per year

Key Responsibilities

  • Review new and existing systems for technical compliance with applicable directives while ensuring protection of data at all classification levels.
  • Advise on in-depth security design reviews and perform threat and risk assessments.
  • Provide input to technical security artifacts, including POA&Ms (Plans of Action and Milestones), SCTM (Security Control Traceability Matrix), and RARs (Risk Assessment Reports).
  • Conduct site visits and assessments to inspect plans and verify implemented security controls.
  • Support activities for the Incident Response Team (IRT).

Requirements

  • DoD 8570 IAT Level II certification or higher (for example: Sec+, CISSP, CASP, etc.).
  • 5+ years implementing NIST 800-53, Rev 4 and the Risk Management Framework (RMF).
  • 5+ years of experience with Windows and Linux environments.
  • 5+ years of experience with virtualization or cloud environments.
  • 2+ years applying information security and assurance practices and principles.
  • Secret level clearance or higher.

Security and Technical Tools

  • NIST 800-53, Rev 4
  • Risk Management Framework (RMF), including OpenRMF and eMASS
  • System Security Plan (SSP), Security Control Traceability Matrix (SCTM), and Continuous Monitoring Plan
  • Incident Response Plan, Access Control Plan, and Security Assessment Plan
  • POA&Ms and RARs (Risk Assessment Reports)
  • MS Active Directory, Splunk, ACAS/Nessus, and McAfee
  • Windows, Linux, and AWS Security

Bonus Points

  • Other security-related certification (cloud, SIEM, forensics, Linux, Windows, etc.).
  • Experience supporting a DevSecOps project environment.
  • Experience as a formerly or currently system administrator, developer, or engineer.
  • Experience with tools and platforms such as OpenRMF, eMASS, MS Active Directory, Splunk, ACAS/Nessus, McAfee, Windows, Linux, and AWS Security.
  • Strong verbal and written communication skills.
  • Ability to engage with users professionally and present technical concepts clearly to semi-technical customers.
  • Ability to interface with experienced Government personnel.
  • Ability to work in a matrixed team environment supporting multiple efforts as needed.
  • Desire to learn new technologies and tools, with willingness to share knowledge with the team.
  • Experience with SIG or ICD 503 compliance.

Similar Jobs