Information System Security Engineer (ISSE) III - Hybrid

Ishpi Information Technologies, Inc. (DBA ISHPI); Philadelphia (Philadelphia County); Hybrid; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a skilled Information System Security Engineer to join their dynamic team. In this pivotal role, you will provide cybersecurity support for critical operations, ensuring compliance and security across various systems. Your expertise in vulnerability management, security assessments, and risk management will be essential in protecting sensitive information. This innovative firm offers a collaborative environment where your contributions will directly impact the success of government and business solutions. If you are passionate about cybersecurity and eager to tackle real-world challenges, this opportunity is perfect for you.

Qualifications

• 7+ years of experience in security requirements and vulnerability scanning.
• Minimum certification: CASP+ CE, CCNP Security, CISA, CISSP, GCED, GCIH, or CCSP.

Responsibilities

• Support Naval Surface Warfare Command with cybersecurity operations.
• Execute RMF process for security approvals and maintain security plans.

Skills

Cybersecurity Compliance

Vulnerability Scanning

Risk Management Framework (RMF)

Security Technical Implementation Guides (STIGs)

Information Assurance Vulnerability Management (IAVM)

Education

Bachelor’s degree in Computer Science

Equivalent degree in Information Technology

Tools

ACAS

SCC

eMASS

Job description

Information System Security Engineer (ISSE) III - Hybrid

Join to apply for the Information System Security Engineer (ISSE) III - Hybrid role at Ishpi Information Technologies, Inc. (DBA ISHPI).

Ishpi Information Technologies, Inc. (DBA ISHPI) is committed to providing technical solutions that meet our customers' business needs. We collaborate with customers, team members, SMEs, technical leaders, and partners to design practical solutions that solve real problems for government and business organizations. As part of our team, you will focus on delivering innovative business solutions using emerging technologies and proven methods.

Role Overview

The ISSE III will support the Naval Surface Warfare Command in Philadelphia, PA, providing cybersecurity support for the Code 104 Information Technology Operations Division. Responsibilities include, but are not limited to:

• Assessment & Authorization (A&A)
• Cybersecurity Compliance and Audit Readiness
• Information Assurance Vulnerability Management (IAVM)
• Vulnerability Scanning and Remediation
• Application of Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)

Key Responsibilities

• Develop, maintain, and track RMF system security plans, including System Categorization, PIT Determination, AO Determination, Implementation Plans, SLCM Strategies, Policies, Hardware and Software Lists, System Diagrams, PIA, and POA&M.
• Execute the RMF process to obtain and maintain IATT, AO approval, ATO, and DATO.
• Identify and tailor security control baselines based on RMF guidelines.
• Perform Ports, Protocols, and Services Management (PPSM) and vulnerability risk assessments.
• Conduct security control testing and remediate vulnerabilities per STIG requirements.
• Maintain POA&Ms in eMASS and develop system-level policies and procedures.
• Implement and assess STIGs and SRGs, perform vulnerability assessments with tools like ACAS, SCC, and Evaluate STIG.
• Deploy security updates, perform audits, maintain inventory, and support change control processes.
• Manage vulnerability data in VRAM, image assets, troubleshoot software, and support asset destruction procedures.
• Provide cybersecurity patching, configuration change documentation, and ensure compliance with DoD and DoN directives.
• Support network security for Windows servers and Cisco hardware, including vulnerability assessments and patching.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or an equivalent from an accredited institution.
• Seven (7) years of professional experience in security requirements, architecting, design, development, configuration, security controls, vulnerability scanning, and securing configurations.
• Minimum certification requirements include one of the following: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP.
• U.S. Citizenship and active security clearance are required.

Additional Information

Ishpi Information Technologies, Inc. is an Equal Opportunity Employer. All qualified candidates will be considered without regard to protected characteristics.

By applying, you express interest in this position and may be considered for other roles with similar skills and requirements.

Job Details

• Senior level: Mid-Senior
• Employment type: Full-time
• Job function: Information Technology