Cleared Information Systems Security Engineer

Northstrat Incorporated; Sterling (VA); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a skilled Information Systems Security Engineer to join its dynamic team. The role emphasizes secure software engineering practices, applying NIST security controls, and managing system vulnerabilities. You'll work collaboratively with various experts to ensure security compliance and maintain thorough documentation. This position offers a unique opportunity to contribute to significant projects while enjoying a balanced work-life environment. If you are passionate about security and eager to make a difference, this role is perfect for you.

Benefits

Flex Time

Individual Benefits Account (IBA)

Profit Sharing Plan (PSP)

Stock Options

Lifelong Learning Opportunities

Qualifications

• 6+ years of experience in information systems security engineering.
• Active Top-Secret clearance required with SCI or SCI eligibility.

Responsibilities

• Manage NIST 800 series security controls for systems.
• Collaborate with teams to resolve security issues and document findings.

Skills

Secure Software Engineering Practices

NIST Special Publications 800

Risk Management Framework (RMF)

System Vulnerability Scanning

CompTIA Security+ Certification

Communication Skills

Collaboration Skills

Education

Bachelor's Degree in STEM

Tools

Assured Compliance Assessment Solution (ACAS)

Security Technical Implementation Guide (STIG)

Job description

Cleared Information Systems Security Engineer

Northstrat is seeking an Information Systems Security Engineer to join our team. The ideal candidate will have experience in the following areas: secure software engineering practices in support of Department of Defense (DoD) or Intelligence Community (IC) customers, application of NIST Special Publications 800 security controls and the Risk Management Framework (RMF) process, and system vulnerability scanning.

Key Responsibilities

• Planning and managing the system application of NIST Special Publications 800 series security controls
• Perform system vulnerability scanning, documenting results, and working with the development team to address security findings
• Generation of comprehensive system security documentation and artifacts, to include a Plan of Action and Milestones (POA&M), for obtaining and maintaining Interim Authorization to Test (IATT), Authority to Connect (ATC) and Authorization to Operate (ATO)
• Work collaboratively with team members, Information Assurance, Information Security Engineering, and other Subject Matter Experts to resolve security issues
• Maintain thorough documentation of all activities and communications through ticketing systems, operational briefs, and status reports

Requirements

• Must have bachelor's degree in a STEM related field and have 6 plus years of relevant experience
• CompTIA Security+ certification is required
• Must be a U.S. citizen
• An active Top-Secret clearance is required with SCI or SCI eligible
• Knowledge of, and practical experience with the NIST Special Publications 800 Series and the Risk Management Framework (RMF) process
• Familiar with secure software engineering practices in support of Department of Defense (DoD) or Intelligence Community (IC) customers
• Experience with Authorization and Accreditation (A&A) process using RMF for classified systems obtaining and maintaining Interim Authorization to Test (IATT), Authority to Connect (ATC) and Authorization to Operate (ATO)
• Experience with vulnerability scanning, and testing/validation of false positives/negatives
• Experience writing POA&M's and working with team members on how to remediate findings
• Experience with security tools such as: Assured Compliance Assessment Solution (ACAS), and Security Technical Implementation Guide (STIG)'s
• Familiar with information security principles and best practices
• Excellent communication and collaboration skills
• Ability to work independently and as part of a team

Preferred Qualifications

• Familiar with tiered security environments (U, S, TS)
• Familiar with AWS security services
• Familiar with AWS infrastructure services
• Familiar with Agile development methodologies

Benefits

Northstrat values true work life balance. We offer power of choice benefits designed to best meet the needs of you and your lifestyle. Our benefits programs are designed to support and encourage wellness, healthy living, retirement investment, and lifetime learning.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. We also offer competitive compensation, benefits, and professional development opportunities.

Flex Time

Northstrat does not mandate specific working hours. Although project requirements may dictate schedules, a Northstrat employee is only required to work an average of 8 hours per weekday over the course of a month.

Individual Benefits Account (IBA)

To attract and retain the highest quality staff, Northstrat provides a unique and versatile benefits package, the Individual Benefit Account (IBA), which places the power of choice in the hands of our greatest asset - the employee.

Profit Sharing Plan (PSP)

The PSP is a qualified retirement plan that Northstrat funds quarterly on the employee's behalf through the IBA in the amount equivalent to 25% (up to the IRS contribution limit) of the employee's compensation.

Stock Options

Because Northstrat is an employee-owned company, all new employees are offered stock options. Employees have the opportunity to receive additional stock options based on accomplishment of individual performance goals.

Lifelong Learning

Our culture promotes and nurtures a growth environment. We hire and scale rapidly to meet the needs of our partner customers.

Join Our Talented Team

We hire the BEST employees and value each one. Since 2021, The Washington Post has recognized Northstrat among its "Top Workplaces".

Northstrat is an Equal Opportunity Employer

We are committed to fostering an inclusive, diverse workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, disability, veteran status or other legally protected status.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology
• Industries
• IT Services and IT Consulting