Information System Security Engineer

Alutiiq, LLC; Philadelphia (Philadelphia County); On-site; USD 90,000 - 110,000; Full time

Job summary

Red Peak Technical Services, LLC, a subsidiary of Alutiiq, LLC, seeks an Information Systems Security Engineer I (ISSE I) to support NSWCPD in Philadelphia, PA. The ISSE I will research, compile reviews, and produce technical documentation for security controls, RMF authorization, and accreditation activities. The role requires DoD security expertise, current SECRET clearance, and U.S.

citizenship. The successful candidate will work with system engineers, ISSMs, and program management to

Qualifications

• Bachelor's degree in a related field required.
• Experience with DoD information systems and RMF.
• Active DoD SECRET clearance required.
• U.S. citizenship required under government contract.

Responsibilities

• Develop system security/IA plans and RMF controls.
• Maintain System Security Plans and RMF artifacts in eMASS.
• Review audit events and coordinate with stakeholders on incidents.
• Collaborate with program management to ensure DoD IA compliance.
• Create and revise technical documentation and procedures.
• Provide task status updates to the Project Manager.
• Decompose system specs to derive security requirements with engineers.

Skills

DISA STIG procedures

RMF processes

NIST 800-53 familiarity

Information security engineering

Education

Bachelor of Science in Computer Science or related field

Tools

ACAS

HBSS

SCAP

eMASS

DIACAP

Job description

Red Peak Technical Services, LLC a subsidiary of Alutiiq, LLC is looking for qualified Information Systems Security Engineer I (ISSE I). The ISSE I will support an active Naval Surface Warfare Center Philadelphia Division (NSWCPD) contract in Philadelphia, PA.

The ISSE I shall research, compile and document reviews, drawings, schematics, and reports, interviews with technical staff members, and the study of published material for use in various logistics documents, technical manuals, test plans, and reports, training materials, installation guides, and other technical documentation.

Primary Duties & Responsibilities:

• Develop system security/IA plans and controls under guidance in DIACAP, RMF, NIST 800-53, NIST 80-37, CNSS 1253, DCID 6/3, and NISCAP.
• Shepherd System Security Plans through inception and decommission utilizing the eMASS workflow and RMF process.
• Review audit events and data for information systems and coordinate events/incidence that may occur with stakeholders.
• Coordinate with program management and customers to mitigate risks and ensure compliance with DoD IA requirements.
• Responsible to develop written instructions, procedures, schematics, and other technical documentation; and likewise, review, redline, or rewrite written instructions, procedures, schematics, and other technical documentation in support of In-Service information technology tools.
• Responsible to provide the status of assigned tasks via both prepared and ad hoc oral briefings to Project Manager.
• Responsible to decompose system specifications to determine security/IA requirements and work with systems engineers, developers, and other security personnel to develop management and operational procedures, when required, to meet those requirements.
• Assists the ISSMs in meeting their duties and responsibilities of their respective systems
• Performs control correlation identifier (CCI) assessments of applicable security controls
• Supports the DoDEA ISCM program by assisting the ISO in completing ISCM responsibilities and by participating in the configuration management process for their respective systems, ensuring completion and reporting annually
• Provides an assessment and recommendation to the ISO and AO as to the need for reaccreditation as a result of a significant change to the system identified during continuous monitoring
• If required to perform the duties of a Control Assessment Validator (referred to as “Validator” within eMASS), acts as a trusted agent of the SCA and their role is to review the test results, artifacts, any entered vulnerabilities for non-compliant controls or CCIs, and status of each CCI of a security control.

Required Qualifications & Experience:

• Proficiency in DISA STIG procedures to include ACAS, HBSS, SCAP, & network scanning.
• Required to have and maintain and current DoD IAM Certification.
• The ability to perform duties unsupervised.
• Experience and knowledgeable with direct FISMA compliance and requirements.
• Active Department of Defense SECRET clearance required.
• Pursuant to the Government Contract, you must be a U.S. Citizen.
• Maintain compliance with DoD 8570.01-M IATII requirements.
• Minimum Education: Bachelor of Science degree in Computer Science, engineering, information technology, or a related field.
• Minimum Experience: Five (5) years of experience in designing computer systems, integrating computer hardware, software, building computers, designing network systems.