Information Systems Security Engineer

Vosper Thornycroft Group; Chantilly (VA); On-site; USD 100,000 - 130,000; Full time

Job summary

A leading technology company is seeking an Information Systems Security Engineer to enhance system security throughout the acquisition lifecycle. Responsibilities include defining security controls and advising stakeholders on risk reduction. The ideal candidate must hold an active TS/SCI clearance and have significant experience in information security or related fields. A Bachelor’s degree or equivalent experience is required, along with expertise in server design, systems engineering, and virtualization technologies. Competitive compensation and benefits are provided.

Qualifications

• Must possess DoD 8570 IAT-3 certification within 6 months of starting.
• Education in computer engineering, information security, or related field required.
• Experience in information technology security or information systems security required.

Responsibilities

• Enhance system security through collaboration with stakeholders.
• Define security control implementation based on functional requirements.
• Review system security designs and advise on risk reduction.

Skills

Clearance: Active TS/SCI with Polygraph

Technical experience in software engineering

Technical experience in configuring and hardening

Proficient with server and desktop hardware design

Knowledge of systems engineering principles

Education

Bachelor’s degree in relevant field + 6 years of experience

Master’s degree or higher + 4 years of experience

High School/GED + 10 years of experience

Tools

VMware

Xen

Hyper V

cloud containers

Job description

Overview

TUNUVA Technologies (a wholly owned subsidiary of VTG) seeks to hire an Information Systems Security Engineer to conduct information systems security engineering activities throughout the acquisition lifecycle. ISSEs are responsible for capturing and refining information protection requirements to ensure their integration into information systems acquisitions and information system development through purposeful security design or configuration. The contractor integrates security functional requirements into existing acquisition lifecycle phases, milestones, and documents using systems engineering principles, methods, concepts, and practices. Personnel shall be knowledgeable of best practices when implementing security controls including software engineering methodologies, security engineering methodologies, security engineering principles, and secure coding techniques, and coordinate activities with assessment and authorization (A&A) stakeholders.

What will you do?

Responsibilities

• Collaborate with system stakeholders and teammates to enhance system security
• Communicate effectively with all security stakeholders
• Trace, define, and plan security control implementation based on functional requirements and system data types (i.e. system categorization, control tailoring, SCTM, and test plans)
• Review system security designs and architectures
• Advise system engineers (developers) on best methods to achieve risk reduction
• Create, revise, or review cybersecurity documentation
• Proactively identify opportunities for increasing customer value and engagement

Do you have what it takes?

Requirements

• Clearance: Active TS/SCI with Polygraph
• Currently hold or obtain and maintain DoD 8570 IAT-3 certification within 6 months of starting the position
• Bachelor’s degree + 6 years of experience OR High School/GED + 10 years of experience OR Associate’s degree + 8 years of experience OR Master’s degree or higher + 4 years of experience
  • Applicants should possess education and experience at the appropriate level for the position. Education in the following areas is considered relevant: computer engineering, information security, information management, and/or computer science. Education in the following areas is considered relevant: Computer science, computer engineering, or related field of study. Experience in the following areas is considered relevant: Information technology security, information systems security, information assurance engineering, performing certification & accreditation testing.

Desired Qualifications

• Knowledge of and experience with ICD 503 and NIST SP 800-37 Risk Management workflows
• Knowledge of and experience with systems engineering principles discussed in NIST SP 800-160 v1 and v2
• Proficient with server, desktop, and infrastructure hardware design and configuration for on-prem and their equivalents for cloud solutions
• Knowledge of system methodologies including client/server, web hosting, web content servers, policy servers, directory servers, firewalls, VPNs, VLANs, WAN, MAN, LAN, switches, routers, and Identity and Access Management (IAM)
• Experience configuring, and supporting virtualization technology, at a minimum, VMware, Xen, Hyper V, and cloud containers.
• Technical experience in configuring and hardening, at a minimum, Windows, Linux, and MacOS
• Experience in technical project management
• Technical experience in software engineering, program design and implementation, configuration management, system maintenance, integration testing, and information system engineering
• Experience in Digital Engineering or Model-Based Systems Engineering (MBSE) is a plus