Information System Security Engineer II

ISPA Technology, LLC; Philadelphia (Philadelphia County); On-site; USD 70,000 - 110,000; Full time

Job summary

Join a forward-thinking technology services leader as an Information System Security Engineer II. This dynamic role involves developing and maintaining security plans, conducting vulnerability assessments, and implementing security controls. With a focus on professional growth, this position offers competitive compensation and comprehensive benefits, including health coverage, generous PTO, and a 401(k) plan. If you are passionate about information security and eager to make a significant impact in a thriving environment, this opportunity is perfect for you.

Benefits

Comprehensive health, vision, and dental coverage

Generous PTO and paid holidays

Life and disability insurance options

401(k) with company match

Recognition and professional development opportunities

Qualifications

• 3+ years of experience in security requirements and controls.
• Expertise in developing and maintaining RMF security plans.

Responsibilities

• Assist in developing and tracking RMF security plans.
• Conduct vulnerability assessments and execute security control testing.

Skills

Risk Management Framework (RMF)

Vulnerability Assessments

Security Control Testing

System Security Policies

Automated Tools (ACAS, SCAP)

Education

Bachelor's degree in Computer Science

IAT II Certification

Tools

eMASS

ACAS

SCAP

Job description

Position:

Information System Security Engineer II

Location:

Philadelphia, PA

Job Id:

339

# of Openings:

1

Overview:

Join ISPA Technology, a recognized leader in the technology services sector with a strong growth record, as an Information System Security Engineer. We offer a dynamic culture focused on professional growth, competitive compensation, and comprehensive benefits.

Responsibilities:

• Assist with developing, maintaining, and tracking Risk Management Framework (RMF) security plans, including system categorization, system diagrams, and plans of action and milestones (POA&M).
• Support the RMF process to obtain and maintain system authorizations such as IATT, AO, ATO, or DATO.
• Conduct Ports, Protocols, and Services Management (PPSM) and perform vulnerability assessments.
• Execute security control testing and develop POA&Ms in eMASS.
• Create and update system security policies and procedures based on RMF boundaries and guidance.
• Implement and assess STIGs and SRGs, and perform vulnerability assessments using automated tools like ACAS, SCAP, and Evaluate STIG.

Requirements:

• Minimum of 3 years of relevant experience.
• Experience in capturing, refining, and implementing security requirements, controls, and configurations.
• Bachelor's degree in computer science, IT, or a related STEM field from an accredited institution.
• IAT II Certification.

Why Choose ISPA Technology?

• Competitive salary with bonus potential.
• Comprehensive health, vision, and dental coverage.
• Generous PTO and paid holidays.
• Life and disability insurance options.
• 401(k) with company match.
• Recognition and professional development opportunities.

ISPA is an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, or other protected status.