Information Systems Security Engineer II

Armada Ltd; Philadelphia (Philadelphia County); On-site; USD 70,000 - 110,000; Full time

Job summary

Join a forward-thinking company as an Information Systems Security Engineer II, where you will play a crucial role in safeguarding information systems. In this dynamic position, you will assist in developing and maintaining Risk Management Framework (RMF) security plans while ensuring compliance with cybersecurity standards. Your expertise will help execute security control testing, conduct vulnerability assessments, and manage security updates across IT systems. This role offers a unique opportunity to work collaboratively within a team, contribute to critical security initiatives, and enhance your skills in a supportive environment. If you are passionate about cybersecurity and ready to make an impact, this is the perfect opportunity for you.

Qualifications

• 3+ years of experience in information security operational requirements.
• IAT Level II certification required for the position.

Responsibilities

• Assist in developing and maintaining Risk Management Framework (RMF) security plans.
• Execute RMF process for obtaining and maintaining security authorizations.
• Perform vulnerability assessments and security control testing.

Skills

Information Assurance Guidance

Risk Management Framework (RMF)

Cybersecurity Compliance

Vulnerability Assessments

Team Collaboration

Communication Skills

Education

Bachelor's Degree in Computer Science

Equivalent Technical Degree

Tools

Assured Compliance Assessment Solution (ACAS)

Vulnerability Remediation Asset Manager (VRAM)

Security Content Automation Protocol (SCAP)

CISCO Networking Hardware

Job description

Information Systems Security Engineer II

• 5001 S Broad St, Philadelphia, PA 19112, USA

Location: Philadelphia, PA (Travel - CONUS locations, less than 5%)

Overtime Exempt: Yes

Reports To: ARMADA HQ

Security Clearance Required: Secret

************CONTINGENT UPON AWARD***************

Duties & Responsibilities:

• The Information Systems Security Engineer II (ISSE II) shall assist with the developing, maintaining, and tracking Risk Management Framework (RMF) system security plans which include System Categorization Forms, Platform Information Technology (PIT) Determination Checklists, Assess Only (AO) Determination Checklists, Implementation Plans, System Level Continuous Monitoring (SLCM) Strategies, System Level Policies, Hardware Lists, Software List, System Diagrams, Privacy Impact Assessments (PIA), and Plans of Action and Milestones (POA&M).
• The Information Systems Security Engineer II shall execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO).
• The Information Systems Security Engineer II shall identify and tailor IT and CS security control baselines based on RMF guidelines and categorization of the RMF boundary.
• The ISSE II shall perform Ports, Protocols, and Services Management (PPSM).
• The ISSE II shall perform IT and CS vulnerability-level risk assessments.
• The ISSE II shall execute security control testing as required by a risk assessment or annual security review (ASR).
• The ISSE II shall mitigate and remediate IT and CS system level vulnerabilities for all assets within the boundary per STIG requirements.
• The ISSE II shall develop and maintain Plans of Actions and Milestones (POA&M) in Enterprise Mission Assurance Support Service (eMASS).
• The ISSE II shall develop and maintain system level IT and CS policies and procedures for respective RMF boundaries and/or guidance provided by the command ISSMs.
• The ISSE II shall implement and assess STIG and SRGs.
• The ISSE II shall perform and develop vulnerability assessments with automated tools such as Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP) Compliance Check (SCC) and Evaluate STIG.
• The ISSE II shall deploy security updates to Information System components.
• The ISSE II shall perform routine audits of IT system hardware and software components.
• The ISSE II shall maintain inventory of Information System components.
• The ISSE II shall participate in IT change control and configuration management processes.
• The ISSE II shall upload vulnerability data in Vulnerability Remediation Asset Manager (VRAM).
• The ISSE II shall image or re-image assets that are part of the assigned RMF boundary.
• The ISSE II shall install software and troubleshoot software issues as necessary to support compliance of the RMF boundaries' assets.
• The ISSE II shall assist with removal of SSD, HDD or other critical components of assets before destruction and removal from the RMF boundary.
• The ISSE II shall provide cybersecurity patching of assets in times of DoD and DoN TASKORDs, FRAGORDs, or even designated by Command ISSM, ACIO, and/or Code 104 management.
• The ISSE II shall support configuration change documentation and control processes and maintaining DOD STIG Compliance.
• The ISSE II shall support cyber compliance of assets that are part of an enterprise IT network to include Windows server and CISCO networking hardware. This includes assessing vulnerabilities, patching and meeting requirements of the STIG for the hardware.
• The ISSE II shall report compliance issues of network hardware to management.
• Other duties as assigned.

Knowledge, Skills, and Abilities (KSAs):

• Ability to work as a team member, communicate, perform office functions and use office tools, customer focused and deliver exceptional performance.
• Ability to develop and implement information assurance guidance and execute ISS functions with little to no supervision.
• Ability to travel less than 5%.

Certifications:

• Minimum Certification Requirements: IAT Level II certification (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND and SSCP)

Minimum/General Experience:

• Three (3) years professional experience capturing and refining information security operational and security requirements, and ensuring those requirements are properly addressed through purposeful architecting, design, development, and configuration; and implementing security controls, configuration changes, software/hardware updates/patches, vulnerability scanning, and securing configurations.
• Bachelor's degree in computer science, information technology, or an equivalent technical degree from an accredited college or university.

Disclaimer:

The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position.