Enterprise - Information Systems Security Officer - Splunk, SSP, NIST

Erias Ventures, LLC; Maryland; Sur place; USD 185 000 - 230 000; Plein temps

Résumé du poste

Erias Ventures, LLC in Maryland seeks an Information Systems Security Engineer (ISSE) to perform and review security assessments across computing environments, ensuring IA standards compliance and risk mitigation.

The role designs, develops, and helps integrate security into systems, supports RMF certification, and collaborates with architects and developers to enforce trusted relations and secure operations.

Qualifications

• Bachelor's degree in CS, IA, ISE, or related discipline.
• Current Top-Secret/SCI with polygraph clearance (not sponsorable).
• 14 years' ISSE experience on similar programs.

Responsabilités

• Perform or review security assessments of computing environments.
• Design and implement IA and security systems and components.
• Support RMF certification, risk management, and accreditation activities.

Connaissances

NIST RMF

Splunk

Call-in support

Formation

Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline

Outils

Splunk

Description du poste

Benefits

Erias Ventures provides a complete package of wealth, health, and happiness benefits. The expected salary range for this position, depending on education and years of experience is $185,000 - $230,000.

Wealth Benefits

• Above Market Hourly Pay
• 11% Roth or Traditional 401k with Immediate Vesting and Deposit
• Spot Bonuses for Assisting with Business Development and Company Growth
• Professional Development Bonuses for Certificates and Degrees

Health Benefits

• Company subsidized Medical Coverage
• 100% Company Paid Vision and Dental Coverage
• 100% Company Paid Long Term Disability, Short Term Disability, and Group Life Insurance
• Monthly Wellness Reimbursement

Happiness Benefits

• Paid Time Off with Flexible Work Schedules and Birthday Off
• Amazon Prime Membership and Monthly Internet Reimbursement
• Technology and Productivity Allowance for Equipment and Supplies
• Morale Building and Company Events to Celebrate our Successes and Build our Community
• Onboarding and Annual Swag
• Company Paid Professional Development and Training

At Erias Ventures, we are dedicated to fostering a diverse and inclusive workplace. As an equal opportunity employer, we ensure that all qualified applicants are considered for employment based on merit, without discrimination. We welcome individuals regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Description

Erias Ventures was founded to serve its customers with an entrepreneurial mindset. We value creative problem-solving, open communication, and empowering our employees to make decisions and put forth new ideas. Our staff includes technical experts working across multiple disciplines, bringing diverse perspectives to every project. We are seeking engineers who wish to grow their careers and want to become part of a technicallystrong and growth-oriented company focused on bringing innovative solutions to the difficult mission problems facing our customers.

We are seeking an Information Systems Security Engineer (ISSE) who shall perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulation and recommend mitigation strategies. Validates and verifies system security requirements definitions and analysis and establishes system security designs. Designs, develops, implements and/or integrates IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements. Builds IA into systems deployed to operational environments. Assists architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Agency security policy and enterprise solutions. Supports the building of security architectures. Enforce the design and implementation of trusted relations among external systems and architectures. Assesses and mitigates system security threats /risks throughout the program life cycle. Contributes to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations. Reviews certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content. Applies system security engineering expertise in one or more of the following to: system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification; authentication; and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing. Support security authorization activities in compliance with NSA/CSS Information System Certification and Accreditation Process (NISCAP) and DoD Risk Management Framework (RMF), the NIST Risk Management Framework (RMF) process, and prescribed NSA/CSS business processes for security engineering.

• Supports information security
• Helps create and enforce security policies and procedures, manage daily security operations, and maintains the system’s security posture
• Assesses security risks and solutions for critical information, manages security settings for software, hardware, and firmware, and reviews the security impact of system changes
• Prepares and reviews required security documents, including SSPs, risk assessments, C&A packages, and SRTMs
• Supports system authorization under the NIST Risk Management Framework (RMF)
• Uses Splunk to monitor security events, analyze logs, and support incident response

Clearance

A current Top-Secret/SCI with polygraph security clearance is required. Candidates cannot be sponsored or nominated for a government security clearance under this position.

Experience

Fourteen (14) years' experience as an ISSE on programs and contracts of similar scope, type and complexity is required. Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university is required.

Required skills:

• NIST RMF
• Splunk
• May be asked to provide future call-in support to back up team on a rotational basis.