Information Systems Security Engineer

MAG Aerospace; Hannover; Vor Ort; USD 80.000 - 250.000; Vollzeit

Zusammenfassung

An established industry player is looking for an Information Systems Security Engineer to join their dynamic team. This role offers a unique opportunity to bridge the gap between security policies and technical implementation, ensuring robust security measures are integrated into critical systems. You'll be part of a fast-growing team dedicated to enhancing cybersecurity capabilities for military operations. With a strong emphasis on professional development and a comprehensive benefits package, this position promises not only career advancement but also the chance to make a significant impact in the field of information security.

Leistungen

Health Benefits

Life Insurance

Disability Insurance

Tuition Assistance

Paid Leave

Professional Development

Qualifikationen

• Ability to develop security architectures and interpret data flow diagrams.
• Thorough knowledge of RMF and ATO processes.

Aufgaben

• Apply security engineering methods to maintain system security.
• Develop and enforce information systems security policies.

Kenntnisse

Security Architectures Development

Cybersecurity Compliance

Risk Management Framework (RMF)

Communication Skills

Analytical Skills

Ausbildung

Bachelor's Degree in a Related Field

10+ Years of Relevant Experience

Tools

EMASS

Twistlock

SonarQube

Jobbeschreibung

Position Summary

MAG IS OFFERING UP TO A 10k SIGN-ON BONUS FOR QUALIFIED CANDIDATES!

MAG Aerospace is seeking an Information Systems Security Engineer (ISSE) to support Product Manager Information Warfare Cyber Development (PdM IWCD) and their external mission partners. The ISSE will provide system security engineering services and support the Government to ensure core security engineering principles are implemented into assigned programs' information systems architecture. The role of the ISSE is to bridge the gap between high-level security policies/requirements and technical/operational implementation of those requirements.

This is a fantastic opportunity to join a fast-growing team with multiple opportunities for upward advancement supporting C&S. The C&S program delivers critical capabilities to counter current and future threats, enabling the next generation of warfighting capabilities from sensor to Soldier worldwide. By applying game-changing cyber technologies through agile development methodology, we enable battlefield dominance for our Warfighters.

Remote/Telework is not available

Essential Duties and Responsibilities

Essential Duties and Responsibilities include the following. Other duties may be assigned.

• Apply current systems security engineering methods, practices, and technologies to the architecture, design, development, evaluation, and integration of systems to maintain system security.
• Review and understand the living documents, how to address scans, and how to update the plan of actions/milestones (POAM).
• Develop, implement, and enforce information systems security policies ensuring system security requirements are addressed during all phases of the acquisition and Information System (IS) lifecycle.
• Evaluate proposed security architectures and designs and provide input as to the adequacy of those security designs to meet required security compliance objectives.
• Contribute to the security planning, assessment, risk analysis, risk management, assessment & authorization activities for a large complex software-intensive system.
• Support the Government to resolve conflicting system security engineering requirements.
• The ISSE will be responsible for taking information from the vendor and updating in EMASS.

Requirements

Minimum Requirements

Knowledge and Skills

• Ability to develop and interpret security architectures, data flow diagrams, and publications that depict the system(s) architecture.
• Experience with modern networks, operating systems, databases, and virtual computing.
• Ability to identify areas of non-compliance and propose solutions designed to fulfill operational requirements and meet cybersecurity requirements simultaneously.
• Thorough knowledge of RMF (Risk Management Framework) and process to end of an ATO (Authority to Operate).
• Thorough understanding of the living documents, how to address scans, and how to update the plan of actions and milestones (POAM).
• Hands-on experience with EMASS.
• Must have the ability to work in a dynamic environment and effectively interact with numerous DOD, military/civilian personnel, and industry partners.
• Ability to teach and guide other cybersecurity personnel and engineers on the proper processes and procedures.
• Must possess a high degree of initiative and personal accountability requiring minimal supervision.
• Demonstrate excellent written and oral communications skills; organizational and analytical skills; the ability to express thoughts clearly; and the ability to effectively collaborate in a team environment.

Clearance

• Must currently possess an Active TS/SCI Clearance with Counterintelligence (CI) Polygraph.

Education and Experience

• Requires a bachelor’s degree in a related field; Four additional years of relevant technical experience may be substituted for the degree.
• 10+ years of prior relevant experience or an equivalent combination of training, work experience, and, preferably, applicable military experience.
• At least five (5) years must be specialized experience including system security analysis and implementation; design assurance or testing for INFOSEC products and systems; integration or testing for INFOSEC products and systems.
• Certified Information Systems Security Professional (CISSP).

Preferred Qualifications

• Experience with Twistlock and SonarQube.
• CISSP-ISSEP or CASP certification.

Other Qualifications

• Willingness to travel (up to 20%) within the organizational geographic Area of Responsibility.
• Ability to work in office/field/lab environments.

Special Note

The position is contingent upon the candidate’s ability to meet physical and medical requirements as needed by the position; including compliance with all applicable federal, state, and local jurisdictional requirements.

Benefits and Compensation

At MAG Aerospace, we value your contributions providing our employees with a robust Total Rewards package that supports your total well-being. Full-time and part-time employees working at least 30 hours a week on a regular basis are eligible to participate in MAG's Total Rewards programs. Our offerings include health, life, disability, financial, and retirement benefits as well as paid leave, professional development, and tuition assistance. Individuals that do not meet the threshold are only eligible for select offerings not inclusive of health benefits. We encourage you to learn more about our Total Rewards Program by visiting the Resource page on our Careers site: MAG Benefits. Salary at MAG Aerospace is determined by various factors including but not limited to location, the particular combination of education, knowledge, skills, competencies, and experience as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $0 to $250,000 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of MAG's total compensation package for employees.