Information Systems Security Engineer (INFOSEC Engineer, ISSE)

M2 Solutions Inc.; Herndon (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

A technology solutions company is seeking an experienced Information Systems Security Engineer (ISSE) in Herndon, Virginia. This role requires a minimum of 11 years' experience and a Bachelor's Degree in a relevant field, or equivalent experience. The ideal candidate will implement security controls, develop security plans, and coordinate with various organizations for compliance. Strong knowledge of government infrastructure and a TS/SCI clearance with polygraph are mandatory. This position also emphasizes independent work and strong relationship-building skills across technical teams.

Qualifications

• Minimum 11 years' experience in information systems security.
• TS/SCI clearance with polygraph is required.
• Experience in Cyber engineering and integration services.

Responsibilities

• Implement and validate security controls.
• Develop architecture documentation and Systems Security Plans.
• Coordinate with customer security organizations for ATO.

Skills

Implementation and validation of security controls

Knowledge of complex shared networks

Self-starter able to work independently

Experience with Government Agency infrastructure

Education

Bachelor's Degree or equivalent experience

Tools

Nessus

Splunk

AWS Certified Security Specialty

Job description

We are actively seeking an Information Systems Security Engineer (ISSE) with a minimum of 11 years' experience with a Bachelor's Degree. Other degrees will be considered with the year's experience adjusted to accommodate.

Required Qualifications

• Implementation and validation of security controls that support the Risk Management Framework (RMF) and ICD 503 Security Accreditation
• Developing architecture documentation and Systems Security Plans (SSP) to support Accreditation and Authorization (A&A) reviews
• POA&M development and implementation
• Coordinating with customer security organizations to achieve Authority to Operate (ATO).
• Knowledge of the complex environment involving shared networks and multiple security enclaves
• Engineering for Cyber engineering and integration services including security, authentication, identity management, authorization, and access control engineering.
• Self-starter able to work independently and build relationships with technical reps across divisions, comfortable with cyber security and able to brief issues to the customer
• Over 5 years of experience working on Government Agency enterprise infrastructure and engineering programs.
• TS/SCI with polygraph

Desired Qualifications

• Nessus / Rapid7
• Security Development and Operations (SecDevOps)
• Various security tools and processes such as Splunk, Nessus Security Center, WebInspect, Xacta
• Cloud security controls and implementation
• STIG compliance and vulnerability managementCISSP
• AWS Certified Security Specialty
• Microsoft Office365
• Experience in one or more software products associated with cyber system engineering for data analytics including SQL security, TANIUM Endpoint Management Software, Powershell, MacAfee, App Blocker, Splunk ITSI.
• Experience with one or more software development environments supporting commercial or open source tools including but not limited to: Linux, Python, C, Bash Scripting, Perl, SQL, Splunk Phantom, UBA, and UIPath
• Experience in one or more cloud computing services and technologies including but not limited to: AWS/C2S, Microsoft Azure, Nutanix, VMware.