Cyber Security Engineer-Information Systems Security Engineer (ISSE) - Senior Principal

Modern Technology Solutions, Inc.; Bath Township (OH); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

20 days PTO/year

Flexible schedules

6% 401k match

Semi-annual bonus eligibility

Company-funded ESOP

Up to $10,000 annual educational reimbursement

Life and disability insurance

Job summary

A leading engineering services firm is seeking a Cyber Security - Information Systems Security Engineer (ISSE) to support projects at Wright Patterson AFB, OH, and Hanscom AFB, MA. The role involves providing cybersecurity expertise, designing security requirements, and ensuring compliance with government regulations. Candidates must have a strong background in cybersecurity with an active Top Secret security clearance. Competitive benefits include PTO, 401k match, and educational reimbursement.

Qualifications

• 18+ years' technical experience in cybersecurity, information technology.
• Demonstrated ability to understand cybersecurity needs of systems.
• Firm understanding of cybersecurity regulations and frameworks.

Responsibilities

• Serve as the Information Systems Security Officer providing technical input.
• Design and develop security requirements reducing risk.
• Evaluate new threats and vulnerabilities to implement safeguards.

Skills

cybersecurity

information technology

communication skills

risk assessment

Education

Bachelor's degree in engineering, computer science, cybersecurity, networking, or programming

Master's degree in engineering, computer science, cybersecurity, networking, or programming

Tools

DISA Security Technical Implementation Guide (STIG)

AWS Architect certification

Job description

Modern Technology Solutions, Inc. (MTSI) is seeking a Cyber Security - Information Systems Security Engineer ( ISSE) in Dayton, OH or Hanscom Air Force Base, MA.

As a Cybersecurity Engineer / Information Systems Security Engineer (ISSE) with MTSI you will support a customer operating out of Wright Patterson AFB in Dayton, OH or Hanscom AFB, MA. Position requires travel up to 20% as required by the Government. The ISSE serves as the Program Office's information security professional responsible for conducting information system security engineering activities that capture and refine their requirements and ensure security is integrated into system and security architecture designs. The ISSE works with the Systems Engineering teams to incorporate cyber resiliency objectives, techniques, and design principles into all engineering and development efforts throughout the systems development life cycle (SDLC).

Responsibilities

• Serve as the Information Systems Security Officer (ISSE) providing technical input, recommendations, and assistance with the implementation of both higher and granular-level cyber security approaches, methods and solutions that incorporate and maintain compliance to requirements resulting from laws, regulations, and other pertinent guidance.
• Participate in acquisition meetings (PMR, PDR, CDR, etc.), concept of operation (CONOP) working groups, change boards, technical exchange meetings, and other similar activities.
• Design and develop security requirements that drive down risk while maintaining operational capability.
• Work between architecture-level and implementation-level engineering meetings to maintain a system-wide view of security functions and apply risk mitigation strategies at the appropriate level.
• Guide and verify defense contractors' work against program requirements and goals. This includes participating in technical discussions, trade studies, and working groups, and conducting research on industry best practices for potential implementation.
• Interface with program managers to explain security requirements, risks and mitigations relative to their priorities of cost and schedule to ensure an acceptable risk tolerance.
• Evaluate newly identified threats and vulnerabilities to customer information systems to ascertain the need for additional safeguards and develop timely implementation strategies to reduce risk.
• Enforce the design and implementation of trusted relationships among external systems and architectures.
• Assess proposed changes to customer information systems, their operation environment, and mission needs for impacts to cybersecurity architectures and continued compliance with cybersecurity requirements.
• Provide inputs to development teams responsible for designing and developing organizational information systems and upgrading legacy systems.
• Employ best practices when implementing security requirements for information systems including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques.
• Keep abreast of current and new security technologies and threats to better support the customer in maintaining cybersecurity resilience.
• Identify integration issues related to the implementation of new systems within the existing infrastructure; recommend mitigation and/or resolution options as appropriate.
• Assist in the design of systems and networks that encompass multiple enclaves to include those with differing data protection/classification requirements.

Qualifications

Required Qualifications:

• 18+ years' technical experience in cybersecurity, information technology with focus on cybersecurity implementations.
• Demonstrated ability to understand cybersecurity needs of systems at varied stages of the SDLC.
• Firm understanding of the DoD 8500.1-M, DoDM 5205.07, Volume 1, Joint SAP Implementation Guide (JSIG), NIST Special Publication 800-53, Intelligence Community Directive (ICD) Number 503.
• Excellent oral and written communication skills and ability to clearly translate client technical needs into technical specifications.
• Demonstrated ability to complete tasks, drive projects to closure, assimilate and correlate project information in a fast‑paced environment.
• Demonstrated ability to assess and articulate risk, including to non‑technical audiences.

Desired Qualifications:

• Experience working on DISA Security Technical Implementation Guide (STIG) implementation.
• Experience working on‑site in a government client environment.
• Familiarity with security procedures while working in a SCIF/SAPF environment.
• Cloud Security Implementation experience.
• Familiarity and experience with NSA requirements for COMSEC.
• Experience with DoD Acquisition Lifecycle experience and/or Rapid Acquisition / Rapid Delivery experience.
• Capable of applying system security engineering expertise to various client programs/processes (e.g., system security design process, engineering life cycle, information domain and cross domain solutions, identification/authentication/authorization of commercial off‑the‑shelf and government off‑the‑shelf software employment, system integration, risk management, intrusion detection, contingency planning, incident handling, configuration control, change management, continuous monitoring, auditing, assessment and authorization, confidentiality, integrity, and availability).

Education Requirements:

• Bachelor's degree in engineering, computer science, cybersecurity, networking, or programming.
• Master's degree in engineering, computer science, cybersecurity, networking, or programming (Highly Desired).

Certification Requirements:

• Certified Information Systems Security Professional (CISSP or CISSP‑ISSEP/CISSP‑ISSAP).
• Certified Cloud Security Professional (CCSP).
• AWS Architect or other similar cloud technology security certification.

Clearance Requirements:

• Must possess an active Top Secret security clearance, current within five (5) years, based upon a T5 or T5R investigation (formerly known as Single Scope Background Investigation (SSBI) or SSBI Periodic Review (SBPR)).
• U.S. Citizenship is required.

Benefits

Interesting Work:

Our co‑workers support some of the most important and critical programs to our national defense and security.

Values:

Our first core value is that employees come first. We challenge our co‑workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.

100% Employee Owned:

We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company‑wide town‑hall meetings three times a year.

Great Benefits – Most Full‑Time Staff Are Eligible for:

• Starting PTO accrual of 20 days PTO/year + 10 holidays/year.
• Flexible schedules.
• 6% 401k match with immediate vesting up to $9k annually.
• Semi‑annual bonus eligibility (July and December).
• Company‑funded Employee Stock Ownership Plan (ESOP) – a separate qualified retirement account.
• Up to $10,000 in annual educational reimbursement.
• Other company‑funded benefits, like life and disability insurance.
• Optional zero‑deductible Blue Cross/Blue Shield health insurance plan.

Track Record of Success:

We have grown every year since our founding in 1993.

Company Information

Modern Technology Solutions, Inc. (MTSI) is a 100% employee‑owned engineering services and solutions company that provides high‑demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance.

For more information about MTSI, please visit www.mtsi-va.com.

MTSI embraces nine core values including our first core value of Employees come first. Consistent with our Core Values, we are committed to Equal Opportunity, making decisions without regard to race, color, religion, sex, national origin, age, military/veteran status, disability, or any other characteristics protected by applicable law. MTSI is committed to Equal Employment Opportunity and providing reasonable accommodations to applicants and employees with physical and/or mental disabilities.