Staff Cybersecurity Analyst / Information Systems Security Engineer (ISSE)

Benefits-focused mission work with a role supporting mission critical network infrastructure and Assessment & Authorization (A&A) accreditation activities for customer products. This onsite position in Chantilly, VA offers base pay in the range of USD 177,000 to 265,600 per year, along with health and time-off support and opportunities for additional compensation depending on position.

Responsibilities

• Conduct assessments of systems and networks in the networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy using passive evaluations (such as compliance audits) and active evaluations (such as vulnerability assessments).
• Apply strict program control processes to mitigate risk and support certification and accreditation, including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research inspections, and periodic audits.
• Assist with implementation of required government policy, including recommendations on process tailoring, and participate in and document process activities (including NISPOM and DCID 6-3).
• Perform analyses to validate established security requirements and recommend additional security requirements and safeguards.
• Support formal Security Test and Evaluation (ST&E) for each government accrediting authority, including pre-test preparations, participation in tests, analysis of results, and preparation of required reports.
• Document results of Certification and Accreditation activities, including technical and coordination activities. Prepare system Security Plans and update the Plan of Actions and Milestones (POA&M).
• Periodically review each system’s audits and monitor corrective actions until all actions are closed.

Requirements

• Active TS/SCI with Polygraph is required to be considered and required to start.
• Experience level requirements: 12 years with a Bachelor’s, 10 years with a Master’s, 8 years with a PhD, or 16 years with a High School diploma (equivalent experience years specified).
• Experience reviewing technical security assessments of computing environments to identify vulnerabilities or non-compliance.
• Experience implementing the Risk Management Framework (RMF) process and the ability to support and document certification and accreditation artifacts.
• Must have experience supporting the A&A process for system accreditation.
• Knowledge of RMF, including applying RMF to accredit a system and nuances in execution.
• Familiarity with NIST 800-53 rev. 4, CNSS-1253, NSM-8, and Zero Trust Architecture/Networking (ZTA/N) high-level concepts and potential implementations.
• Experience with both initial accreditation activities and continuous monitoring tasks, with willingness to adapt to rapidly changing toolsets and control requirements.
• Familiarity with network monitoring and vulnerability detection tools such as Nessus, Rapid7, Splunk, and Xacta.
• Strong competency with Microsoft Office (Excel, PowerPoint, and Word).

Technologies

• Risk Management Framework (RMF)
• NIST 800-53 rev. 4
• CNSS-1253
• National Security Memorandum 8 (NSM-8)
• Zero Trust Architecture/Networking (ZTA/N)
• Nessus, Rapid7, Splunk, Xacta
• Microsoft Office (Excel, PowerPoint, Word)
• Microsoft Windows, Enterprise Linux variants
• AWS, Microsoft Azure

Benefits

• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays
• Paid time off (PTO) for vacation and/or personal business
• Depending on the position, eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
• Annual bonuses designed to reward individual contributions and allow employees to share in company results
• Employees in Vice President or Director positions may be eligible for Long Term Incentives

Additional Information

• Travel: Yes, 10% of the time
• Clearance required for start: Yes (Polygraph)
• Relocation assistance: No relocation assistance available
• U.S. citizenship requirement: U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions
• Preferred qualifications: CISSP, CASP, or other IT security certifications; experience using Rapid7 or Tenable Nessus; background in Technical Writing or Instructional Systems Design; privileged/power-user knowledge in at least one of Microsoft Windows or Enterprise Linux variants; cloud infrastructure experience with AWS or Microsoft Azure
• Application period: Estimated 20 days from the job posting date (may be shortened or extended based on business needs and candidate availability)