Information System Security Engineer

Tyto Athene, LLC; Reston (VA); On-site; USD 90,000 - 125,000; Full time

Benefits offered by this job

Vision insurance

Medical insurance

401(k)

Paid paternity leave

Paid maternity leave

Tuition assistance

Job summary

A technology consulting firm in Reston, Virginia is seeking an experienced Information System Security Engineer for a full-time position. Responsibilities include ensuring compliance with security frameworks, conducting risk analysis, and collaborating with IT staff to resolve security issues. Ideal candidates will have strong communication skills and a foundational understanding of security technologies, with certifications such as Security + or CISSP. This role offers competitive benefits including medical insurance and 401(k).

Qualifications

• Experience with vulnerability testing and remediation planning.
• Ability to monitor and respond to security alerts.
• Familiarity with system security plans and audit preparation.

Responsibilities

• Ensure compliance with CMMC 2.0 and ISO 27k frameworks.
• Perform vulnerability testing and risk analysis.
• Collaborate to resolve identified security issues.

Skills

Multitasking

Strong verbal and written communication skills

Compliance / Risk / Audit background

Working effectively with technical and non-technical employees

Foundational understanding of security technologies

Education

4 or more years of experience in information systems or IT Security Role

Tools

Security +

CISSP or CEH

MCP Windows Server 2022

MCP Windows 11

Job description

Join to apply for the Information System Security Engineer role at Tyto Athene, LLC

Base pay range

$90,000.00/yr - $125,000.00/yr

Direct message the job poster from Tyto Athene, LLC

Tyto Athene is searching for an Information Systems Security Engineer. The Information Systems Security Engineer provides technical security administrative duties for infrastructure related to firewalls, encryption, intrusion detection systems, vulnerability scanning, security monitoring tools, authentication, web filtering, identity management, access control systems, and their associated logs and processes.

Responsibilities:

• Ensures compliance with CMMC 2.0, ISO 27k and other frameworks
• Perform vulnerability testing, remediation planning, risk analysis, security assessments and make updates to the assessment as required
• Monitors SLAs for responsiveness and coverage; act as liaison with MSSP
• Track and document system security findings, audit results, and compliance reporting.
• Collaborate with program and IT staff to resolve identified security issues and risks.
• Reviewing network security settings and configurations against industry benchmarks
• Monitor, respond, investigate, and remediate security alerts and/or incidents
• Maintain and test Information Security Incident Response Plan, and related procedures and standards
• Works with 3rd Party auditor to maintain up to date policies, procedures, and standards
• Participates as a technical advisor for a variety of ad-hoc information security projects that will be dictated by current business and technological developments
• Identification of tool / solution needs and requirements working with technology support teams to coordinate setup and deployment
• Attending cyber security related events and networking with industry peers to inform engineering and operations processes of effective risk mitigation strategies for cyber-attacks

Required:

• Has the ability to multitask and maintains a positive attitude during difficult times
• Demonstrates strong verbal and written communication skills
• Compliance / Risk / Audit background
• Ability to work effectively with technical and non-technical employees
• A foundational understanding of security technologies commonly leveraged to support a large-scale, multi-platform enterprise environment (system and/or security support for Windows, Mac, Unix, and mainframe platforms)
• Familiarity with system security plans (SSPs), Plan of Action & Milestones (POA&M), certification and Accreditation packages, architecture diagrams, contingency plan, incident response plan, and other documentation audit preparation
• 4 or more years of experience in information systems, cyber security compliance, or IT Security Role

Certifications or Licensing:

• Security +
• CISSP or CEH
• MCP Windows Server 2022
• MCP Windows 11

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology; IT Services and IT Consulting; Computer and Network Security

Vision insurance

Medical insurance

401(k)

Paid paternity leave

Paid maternity leave

Tuition assistance