Sr ISSE-Senior Information Systems Security Engineer

Dynamic Data Solutions, D2S LLC is mission-led and values-driven, built on a people-first philosophy that supports growth, empowers accountability, and holds integrity at the highest standard. If you want to apply deep security engineering expertise to large-scale programs and help enable trusted outcomes across distributed systems, this Senior Information Systems Security Engineer role at Fort George G Meade, MD (onsite) is a strong fit.

What you’ll do

• Validate and verify system security requirements and develop security designs for large-scale systems, major system elements, and interfacing systems across complex, geographically distributed environments.
• Identify and implement information security architectures and functionality to support consistent application of security policy and enterprise solutions.
• Recommend and develop technical solutions, products, and standards aligned to current and target system security architecture.
• Assess and mitigate security threats and risks throughout the program life cycle.
• Lead and/or contribute to security planning, assessments, risk analysis, risk management, and certification and awareness activities for system and networking operations.
• Collaborate daily with internal technical experts and communicate with Program Managers and customer organization POCs on security issues of significant importance.
• Participate in Program Increment Planning and agile team activities.
• Partner with System Engineering, Test Engineering, and Integration teams to ensure hardware and software architecture and implementation meet security requirements.
• Analyze and assess implementations against multiple security compliance policies, recommending and implementing enhancements.
• Evaluate security solutions to ensure they meet customer requirements for processing information.
• Assess the impact of new development on operational security posture and perform evaluations, reviews, and testing of critical software.
• Propose, assess, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
• Audit and assess system security configuration settings using common methodologies and tools.
• Manage and enforce security strategies and policies across components of geographically distributed systems.
• Provide configuration management for security-relevant information system software.
• Serve as a subject matter expert in security architecture, advising Program Managers, customer technical experts, and internal program teams.
• Formulate security compliance requirements for new system features and identify and remediate security issues across the system.
• Support risk assessment, risk management, security control assessment, continuous monitoring, service design, and other IA program support functions.
• Help development teams strengthen understanding of vulnerabilities, attack vectors, and remediation approaches.
• Plan and conduct security verification testing of relevant type 1 devices.

What you bring

• At least 12 years of experience working as an ISSE on a large technical program.
• Solid understanding of security practices and policies plus hands-on vulnerability testing experience using Customer tools.
• Experience applying the Risk Management Framework.
• Experience formulating and assessing IT security policy.
• Demonstrated knowledge and experience with common security tools, including Nessus, NMAP, and Wireshark, and familiarity with hardware/software security implementation, communication protocol, encryption techniques/tools, and web services.
• Experience with secure configuration of commonly used desktop and server operating systems.
• Comfort working on multiple systems and components simultaneously in varied configurations.
• Strong verbal and written communication skills.
• Commitment to adopting and adhering to best practices.
• Ability to plan and prioritize tasking and clearly communicate technical options and trade-offs.
• Capability to deliver high-quality work independently and with a team in a fast-moving environment.

Technologies you’ll use

• Nessus
• NMAP
• Wireshark
• Risk Management Framework
• Web services

Desired qualifications

• Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline.
• Five (5) years of experience with Defense in Depth principles/technology, including access control, authorization, identification and authentication, public key infrastructure, network and enterprise security architecture, and applying risk assessment methodology to system development.
• DoD 8570 compliance with IASAE Level 2 or 3.
• ISSEP certification.
• CISSP certification.
• Experience developing or implementing integrated security services management processes (including assessing and auditing network penetration testing, anti-virus planning assistance, risk analysis, and incident response).
• Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls covering development, design, and implementation.
• Experience with penetration testing tools.
• Experience with scripting languages.