Information Systems Security Engineer Chantilly, Virginia TS/SCI Full Scope Poly

The Josef Group; Chantilly (VA); Hybrid; USD 140,000 - 200,000; Full time

Job summary

The Josef Group is seeking an experienced Information System Security Engineer (ISSE) to protect mission-critical information systems and ensure compliance with Intelligence Community security requirements.

The role will design and embed security controls, perform vulnerability assessments, and support ATO processes across networking, computing, and cloud environments. A TS/SCI Full Scope Poly is preferred, with 8+ years in secure cybersecurity and IA policy familiarity.

Qualifications

• Bachelor's degree in cybersecurity, computer science, or related field.
• 8+ years of experience supporting highly secure cybersecurity systems, including ATO processing, A&A documentation, networking operations, and security control analysis/remediation.
• Experience supporting highly secure, enclaved environments.
• High familiarity with IA concepts, SCA analysis process, and Cybersecurity policies such as NIST, FISMA, and RMF.

Responsibilities

• Design and embed security controls into system architectures.
• Run routine vulnerability scans and patch issues with system admins/developers.
• Create and review A&A documentation and provide feedback on completeness and compliance.
• Advise sponsors and customers on Lifecycle Assessment and Authorization processes.
• Maintain baselines and configuration management including security event monitoring policies.
• Coordinate changes through Sponsor’s approved cybersecurity processes.

Skills

Cybersecurity expertise

IA concepts

NIST/FISMA/RMF

A&A documentation

Enclave environments

Education

Bachelor's Degree in Cybersecurity, CS, or related field

Tools

COTS/GOTS tools

Job description

This role provides cybersecurity and systems security engineering expertise to protect mission-critical information systems and ensure compliance with applicable Intelligence Community security requirements. The ISSE will assess system architectures, identify and mitigate vulnerabilities, support authorization activities, and collaborate with technical and mission stakeholders to integrate security throughout the system lifecycle.

• Technical cybersecurity role responsible for designing and embedding security controls into system architectures
• Ensure scans for all systems are run on a routine basis and work with system administrators/developers to patch vulnerabilities and policy failures
• A&A -review and complete required technical documentation (Accounts Management Plan, SOPs, etc.)
• Understanding of computer architecture, networking, operating systems, and network security
• Work with ISSMs to resolve any issues
• Develop, implement, and/or integrate Information Assurance (IA) and security systems, including those for networking, computing, virtualization, cloud, and enclave environments, to include those with multiple enclaves and with differing data protection/classification requirements.
• Review and conduct technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (lA) standards and regulations, and recommend mitigation strategies.
• Create and review Assessment and Authorization (A&A) Body of Evidence documentation and provide feedback on completeness and compliance of its content.
• Advise and assist the Sponsor's customers with the Lifecycle Assessment and Authorization process.
• Ensure all program activities maintain system baselines and configuration management items, including security event monitoring policies, in a manner determined and agreed to by the COTR and the Sponsor's management.
• Ensure changes are made using the Sponsor’s approved cybersecurity approval process and are coordinated and scheduled.
• Maintain appropriate levels of documentation deemed acceptable by Agency regulations and guidelines for each individual project, including operations and maintenance information, operations guides, design documents, scans, and overall concepts of operations.
• Enforce the design and implementation of trusted interfaces among external systems and architectures.
• Utilize COTS/GOTS and custom tools in order to scan, identify, contain, mitigate and remediate vulnerabilities and intrusions.
• Protect information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording and destruction.
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information.

Required:

• An active TS/SCI Full Scope Poly Security Clearance (Preferrably from this client)
• Bachelor's Degree in Cybersecurity, computer science, or related field
• 8+ years of experience supporting highly secure cybersecurity systems, including ATO processing, A&A documentation, networking operations, and security control analysis/remediation
• Experience supporting highly secure, enclaved environments
• High familiarity with IA concepts, SCA analysis process, and Cybersecurity policies such as NIST, FISMA, and RMF

Desired:

• Current CISSP, CISM, or CASP is preferred
• Experience with cloud-based architectures
• Continual education and research on cybersecurity trends, methologies, and policies