Information Security System Engineer

Canfield Consulting Group; Maryland; On-site; USD 100,000 - 130,000; Full time

Job summary

A defense consulting firm in Maryland is seeking an experienced information security system engineer to support a contract with the Defense Information Systems Agency. The role involves providing validation for cybersecurity policies and collaborating with engineers on security designs. Candidates should have a minimum of 10 years in information systems security engineering and hold an IASAE Level III certification. This position is contingent upon contract award.

Qualifications

• 10 years of specialized experience in information systems security engineering.
• Active Secret clearance required.
• Expert knowledge of security architectures, network designs, and cloud technologies.

Responsibilities

• Provide validation and verification of DISA capabilities to ensure they are cyber secured.
• Prepare and present briefings on complex information security issues.
• Evaluate security architectures and design requirements throughout system lifecycles.

Skills

Information systems security engineering

Cybersecurity policies and principles

Communication skills

Risk assessment

Technical solutions development

Education

Information Assurance Systems Architect and Engineer (IASAE) Level III certification

Tools

Docker Containers

Infrastructure as a Service (IaaS)

Job description

Canfield CyberDefense Group is looking for an experienced information security system engineer to support an upcoming contract with the Defense Information Systems Agency. This position will provide independent validation and verification to ensure that DISA capabilities are following policy, such that the capabilities are cyber secured.

Please note that this position is contingent upon contract award.

• 10years of specialized experience in the field of information systems securityengineering.
• Holdan active Secret clearance.
• InformationAssurance Systems Architect and Engineer (IASAE) Level III certified inaccordance with DoD 8570.01-M
• Expertknowledge of information security architectures and infrastructure includingnetwork designs, web services, application services, databases, directories,cloud technologies, virtual environments.
• Strongbackground in cybersecurity DoD standards;e.g. National Institute of Standardsand Technology (NIST) Special Publications (SP), DoD Memorandums, SecurityTechnical Implementation Guides (STIGS), Committee on National Security Systems(CNSS), DoD Instructions, Internet Engineering Task Force (IETF), RiskManagement Framework (RMF) and other DoD and commercial standards.
• Capableof communicating cybersecurity policies and principals at all levels of theorganization; prepare/present briefings to senior management officials oncomplex Information Security issues.
• Ableto collaborate closely with systems engineers, developers, contractors, programmanagement offices to mitigate design risks and to recommended solutions toaddress security flaws identified in system designs. Evaluate and provide oversight on securityarchitectures and design requirements in all phases of the system lifecycles.
• Demonstratedexpertise in bridging the gap between high level DoD and Commercial securitypolicies and best practices to the technical and operational implementation ofthose requirements. Focus on porting requirements to cutting-edge technologiessuch as Docker Containers, Infrastructure as a Service (IaaS), etc.
• Capable of utilizingengineering experience to develop robust technical solutions and identifysecurity tools to aid mitigating security vulnerabilities and creatingrepeatable processes.
• Able to providefeedback on the STIG recommendations identified by the material developer.Ensure that the developer understands the requirements and the proposed designis compliant with requirements identified in these STIGs.
• Capable to leadand conduct Security Engineering Reviews (SERs) for the purposes of verifyingall IA aspects of the design and ensuring the developer understands therequirements.
• Experienced inconducting analysis of software for risk assessment and approval into thesoftware baseline (Open Source Software (OSS), commercial off the shelf (COTS),reuse of government off the shelf (GOTS), freeware, shareware, mobile code).
• Experience inparticipating in the Cybersecurity Validation Hot Washes, Cybersecurity Teammeetings, and the Cyber Security Assessment ReadinessReview (CSARR) meetings.

Apply For This Job

Attach Resume *