Information Systems Security Engineer (INFOSEC Engineer, ISSE) Herndon, Virginia

M2solutions Inc; Herndon (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

M2solutions Inc is seeking an experienced Information Systems Security Engineer (ISSE) in Herndon, Virginia, with a minimum of 11 years’ experience and a Bachelor’s Degree. The role involves implementing security controls, developing architecture documentation, and coordinating with security organizations.

The ideal candidate should be a self-starter with experience in Government Agency infrastructure and key qualifications including TS/SCI with polygraph. The position offers a challenging environment with opportunities for growth.

Qualifications

• Minimum of 11 years’ experience in Information Systems security.
• Experience developing Systems Security Plans (SSP).
• TS/SCI with polygraph required.

Responsibilities

• Implement and validate security controls supporting the Risk Management Framework.
• Coordinate with security organizations to achieve Authority to Operate.
• Develop POA&M.

Skills

Implementation and validation of security controls

Developing architecture documentation

Cyber engineering and integration services

Knowledge of shared networks and security enclaves

Self-starter with independent working ability

Experience with Government Agency infrastructure

Education

Bachelor’s Degree or equivalent

CISSP

AWS Certified Security Specialty

Tools

Splunk

Nessus Security Center

AWS/C2S

Microsoft Azure

Job description

We are actively seeking an Information Systems Security Engineer (ISSE) with a minimum of 11 years’ experience with a Bachelor’s Degree. Other degrees will be considered with the year’s experience adjusted to accommodate.

REQUIRED QUALIFICATIONS

• Implementation and validation of security controls that support the Risk Management Framework (RMF) and ICD 503 Security Accreditation
• Developing architecture documentation and Systems Security Plans (SSP) to support Accreditation and Authorization (A&A) reviews
• POA&M development and implementation
• Coordinating with customer security organizations to achieve Authority to Operate (ATO).
• Knowledge of the complex environment involving shared networks and multiple security enclaves
• Engineering for Cyber engineering and integration services including security, authentication, identity management, authorization, and access control engineering.
• Self-starter able to work independently and build relationships with technical reps across divisions, comfortable with cyber security and able to brief issues to the customer
• Over 5 years of experience working on Government Agency enterprise infrastructure and engineering programs.
• TS/SCI with polygraph

DESIRED QUALIFICATIONS

• Security Development and Operations (SecDevOps)
• Various security tools and processes such as Splunk, Nessus Security Center, WebInspect, Xacta
• Cloud security controls and implementation
• STIG compliance and vulnerability management
• CISSP
• AWS Certified Security Specialty
• Microsoft Office365
• Experience in one or more software products associated with cyber system engineering for data analytics including SQL security, TANIUM Endpoint Management Software, Powershell, MacAfee, App Blocker, Splunk ITSI.
• Experience with one or more software development environments supporting commercial or open source tools including but not limited to: Linux, Python, C, Bash Scripting, Perl, SQL, Splunk Phantom, UBA, and UIPath
• Experience in one or more cloud computing services and technologies including but not limited to: AWS/C2S, Microsoft Azure, Nutanix, VMware.

Equal Employment Opportunity

As set forth in M2 Solutions’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.