Information Systems Security Engineer (INFOSEC Engineer, ISSE)

M2 Solutions Inc.; Herndon (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

M2 Solutions Inc. is seeking an Information Systems Security Engineer (ISSE) with extensive RMF and ATO experience to support complex government infrastructure in Herndon, VA.

The role requires a TS/SCI with polygraph and 11+ years of related work, with a focus on security controls, documentation, and accreditation processes. The successful candidate will develop SSPs, coordinate with customer security staffs, and drive POA&M initiatives while ensuring robust cyber security across multiple

Qualifications

• Implementation and validation of RMF and ICD 503 security controls.
• Develop SSPs to support Accreditation and Authorization reviews.
• POA&M development and implementation.
• Coordinating with customer security organizations to achieve ATO.

Responsibilities

• Lead security controls for RMF/ATO reviews and documentation.
• Develop and maintain Systems Security Plans (SSP).
• Coordinate with customer security teams to achieve Authority to Operate (ATO).
• Support vulnerability management and STIG compliance.

Skills

RMF/ICD 503 knowledge

Security accreditation

Customer briefing

Independent worker

Government agency exp

Cloud security concepts

Education

Bachelor's Degree in a related field

TS/SCI with polygraph

Tools

Nessus

Rapid7

Splunk

WebInspect

Xacta

Powershell

Cloud platforms AWS/Azure

Job description

We are actively seeking an Information Systems Security Engineer (ISSE) with a minimum of 11 years' experience with a Bachelor's Degree. Other degrees will be considered with the year's experience adjusted to accommodate.

Required Qualifications

• Implementation and validation of security controls that support the Risk Management Framework (RMF) and ICD 503 Security Accreditation
• Developing architecture documentation and Systems Security Plans (SSP) to support Accreditation and Authorization (A&A) reviews
• POA&M development and implementation
• Coordinating with customer security organizations to achieve Authority to Operate (ATO).
• Knowledge of the complex environment involving shared networks and multiple security enclaves
• Engineering for Cyber engineering and integration services including security, authentication, identity management, authorization, and access control engineering.
• Self-starter able to work independently and build relationships with technical reps across divisions, comfortable with cyber security and able to brief issues to the customer
• Over 5 years of experience working on Government Agency enterprise infrastructure and engineering programs.
• TS/SCI with polygraph

Desired Qualifications

• Nessus / Rapid7
• Security Development and Operations (SecDevOps)
• Various security tools and processes such as Splunk, Nessus Security Center, WebInspect, Xacta
• Cloud security controls and implementation
• STIG compliance and vulnerability management
• CISSP
• AWS Certified Security Specialty
• Microsoft Office365
• Experience in one or more software products associated with cyber system engineering for data analytics including SQL security, TANIUM Endpoint Management Software, Powershell, MacAfee, App Blocker, Splunk ITSI.
• Experience with one or more software development environments supporting commercial or open source tools including but not limited to: Linux, Python, C, Bash Scripting, Perl, SQL, Splunk Phantom, UBA, and UIPath
• Experience in one or more cloud computing services and technologies including but not limited to: AWS/C2S, Microsoft Azure, Nutanix, VMware.