System Security Plan

System Security Plan Engineer Jobs

3 jobs found

5d ago

Information Systems Security Engineer (ISSE), Journeyman

CGI Group, Inc. Arlington, VA

Arlington, VA

5d ago

$100k - $150k/yr Full time Information Security Information Systems InfoSec

Apply Now

Job Description

The Information Systems Security Engineer (ISSE) role at CGI Group, Inc., based in Arlington, VA with hybrid work options, involves designing, implementing, and managing security solutions for information systems, ensuring alignment with security standards and conducting risk assessments. The position offers a salary range of USD 100,000 to 150,000 per year.

Responsibilities

Security architecture design: Develop and deploy security architectures for information systems, spanning hardware, software, and network layers.
Risk management: Identify and evaluate security risks, formulate mitigation strategies, and implement controls to remediate vulnerabilities.
Security compliance: Verify that systems adhere to applicable security policies, regulations, and standards, including NIST, RMF, and ICD 503.
Vulnerability management: Perform vulnerability scans, analyze findings, and propose remediation measures.
Security documentation: Create and maintain security documentation such as system security plans, security assessment reports, and risk management plans.
Collaboration and communication: Collaborate with system administrators, network engineers, software developers, and other stakeholders to integrate security into the system development lifecycle.
Continuous monitoring: Engage in continuous monitoring activities to sustain security posture and ensure ongoing compliance.
Incident response: Contribute to incident response efforts, investigating security incidents, analyzing malware, and conducting forensic analysis.

Requirements

Education and experience: Bachelor’s degree and 2 to 5 years of related experience.
Security clearance: Active TS/SCI clearance with polygraph.
Technical expertise: Solid understanding of security principles, technologies, and best practices.
RMF: Experience applying the Risk Management Framework to information systems.
Security architecture: Knowledge of secure system design principles and experience crafting secure architectures.
Security controls: Familiarity with a range of security controls and their implementation.
Vulnerability assessment: Experience using vulnerability scanning tools and methodologies.
Security documentation: Ability to create and maintain security documentation.
Communication: Excellent verbal and written communication skills to collaborate with diverse teams.
Problem solving: Strong analytical and problem-solving abilities to address complex security challenges.
Certifications: CISSP, CISM, CAP, or other recognized security certifications.

Technologies

RMF
NIST
ICD 503

Benefits

Competitive compensation
Comprehensive insurance options
Matching contributions through the 401(k) plan and the share purchase plan
Paid time off for vacation, holidays, and sick time
Paid parental leave
Learning opportunities and tuition assistance
Wellness and well-being programs

View full job page →

6d ago

Cybersecurity Systems Engineer/Information Systems Security Engineer (ISSE) - TS/SCI with Polygraph

General Dynamics Information Technology Washington, DC

Washington, DC

6d ago

$164k - $213k/yr Full time Information Security InfoSec ISSM

Apply Now

Job Description

General Dynamics Information Technology offers an award winning culture of innovation and a military friendly workplace supported by an AI powered career planning tool, a dedicated internal mobility team, comprehensive benefits and wellness programs, a 401K with company match, competitive pay and paid time off. This on site opportunity in Washington, DC carries a salary range of USD 164,382 to 212,750 per year and requires an active TS/SCI clearance with polygraph. The role centers on cybersecurity systems engineering and leading RMF A and A activities, documentation, and accreditation for government systems.

Benefits

Career growth aided by an AI driven tool that maps learning opportunities and next steps
Internal mobility team dedicated to helping you reach your professional goals
Comprehensive benefits and wellness packages, plus 401K with company match, and competitive pay with paid time off
Award winning culture that emphasizes innovation and a military friendly environment

Responsibilities

Lead Accreditation and Authorization reviews by group level ISSMs and Security Controls Assessors
Document security control implementations and compile RMF and ICD 503 artifacts to support A&A efforts
Develop a clear understanding of project architectures to write Systems Security Plans and CONOPS
Collaborate with system owners, project managers, and engineers to prepare Contingency Plans, General User Guides, Privileged User Guides, and Standard Operating Procedures
Capture and document POA&M implementations and mitigations with the necessary artifacts
Coordinate with contractor and customer personnel to gather A&A content and navigate the customer process to achieve ATD, IATT, and ATO for assigned systems
Monitor A&A projects and articulate status across all stakeholder levels
Support audit liaison activities and compliance oversight to strengthen RMF adherence
Perform technical content reviews and edits as part of the Annual ISCM and OA Strategy Plan Update
Conduct updates to the control volatility section of the plan in light of emerging threats and evolving guidance
Provide audit liaison support for internal and external audits and data calls, delivering actionable recommendations

Requirements

Education and Experience: Technical training, certifications or degree plus 10 years of related work
Certifications: DoD 8570.01-M IASAE Level II
Security Clearance: Active TS/SCI with Polygraph
Location: On customer site

Technologies

RMF
ICD 503 Security Accreditation
ISCM

View full job page →

9d ago

Staff/Sr. Principal Cybersecurity Systems Engineer (CSE)

Northrop Grumman Oklahoma City, OK

Oklahoma City, OK

9d ago

$128k - $239k/yr Full time Senior Application Security Cybersecurity Tools

Apply Now

Job Description

Northrop Grumman is seeking a Staff or Senior Principal Cybersecurity Systems Engineer for the B-2 program in Oklahoma City, onsite. The role focuses on assessing software and hardware for vulnerabilities, developing automation for cybersecurity processes, and guiding security layout, architecture, and verification across the system lifecycle. A current DoD Secret clearance is required to qualify for this position.

Responsibilities

Solve complex technical problems involving low level cybersecurity concepts.
Demonstrate technical leadership in cybersecurity concepts and tasks.
Assess results from software static code analysis.
Complete Cybersecurity Impact Appraisals and Evaluations on hardware projects.
Generate and maintain artifacts for Air Force authorization decisions.
Perform system vulnerability scans using ACAS and STIGs.
Conduct manual STIG / SRG verifications on diverse equipment, including collecting and evaluating findings.
Perform system categorization based on impact analysis.
Develop artifacts required for a RMF package: System Security Plan, Continuous Monitoring Plan, Risk Assessment Report, Security Control Traceability Matrix, Plan Of Actions & Milestones, etc.
Participate and lead in systems engineering events across the system development lifecycle.
Participate in Systems Engineering Technical Review events across the lifecycle including PDR, CDR, SRR, TRR.
Implement, review and assess cybersecurity system requirements verification and validation methods.

Requirements

Basic qualifications for Staff Cyber Systems Engineer / Level 5

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Systems Engineering, Cybersecurity Engineering, or another STEM field with a minimum 12 years of relevant experience, OR 10 years with a Master’s degree, OR 8 years with a PhD.
Demonstrated experience in cybersecurity vulnerability assessments and evaluation.
Knowledge of NIST 800-53, NIST 800-171, NSS/CSA PM 9-12 and JSIG.
Current or active DoD Secret clearance.
Current CISSP or Security+ CE certificate or IAM III certification or higher, or ability to attain Security+ CE certificate within 6 months.
Ability to be program cleared.

Basic qualifications for Senior Principal Cyber Systems Engineer / Level 4

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Systems Engineering, Cybersecurity Engineering, or another STEM field with a minimum 8 years of relevant experience, OR 6 years with a Master’s degree, OR 4 years with a PhD.
Demonstrated experience in cybersecurity vulnerability assessments and evaluation.
Knowledge of NIST 800-53, NIST 800-171, NSS/CSA PM 9-12 and JSIG.
Current or active DoD Secret clearance.
Current Security+ CE certificate or IAM II certification or higher, or ability to attain Security+ CE certificate within 6 months.
Ability to be program cleared.

Preferred qualifications

Program cleared.
Current CSSLP, CISSP or other IAM III certification per DoD 8140.

Technologies

ACAS
STIGs

Compensation

Primary level salary range: $127,900.00 - $191,900.00

Secondary level salary range: $159,400.00 - $239,000.00

View full job page →

System Security Plan Engineer Jobs

Information Systems Security Engineer (ISSE), Journeyman

Cybersecurity Systems Engineer/Information Systems Security Engineer (ISSE) - TS/SCI with Polygraph

Staff/Sr. Principal Cybersecurity Systems Engineer (CSE)

Get System Security Plan Engineer Jobs alerts