Information Systems Security Engineer (ISSE)

Modern Technology Solutions, Inc. (MTSI); Albuquerque (NM); Presencial; USD 110 000 - 160 000; Tempo integral

Resumo da oferta

Modern Technology Solutions, Inc. (MTSI) seeks an Information Systems Security Engineer (ISSE) to lead security for the program office.

This role covers researching, testing, training, and implementing programs to safeguard sensitive data across the organization’s information security system. The ISSE will collaborate with System Engineering to integrate cyber resiliency principles throughout the SDLC, document security environments and cloud operations, and analyze requirements for complex

Qualificações

• 10+ years of technical cybersecurity/IT experience.
• Experience with SAPs and sensitive programs.
• Ability to quantify risk to enterprise systems and policy compliance.
• Excellent communication skills, both written and verbal.

Responsabilidades

• Collaborate with System Engineering to embed cyber resiliency in SDLC.
• Develop and maintain security docs, diagrams, and cloud ops guides.
• Analyze requirements, design, and integration for complex apps.
• Support Change Requests and assess security impact of changes.
• Produce implementation and design docs for security features.
• Create SOPs and assist with Plans of Action and Milestones (POA&M).
• Monitor system security to ensure compliance with authorization packages.

Conhecimentos

Cybersecurity expertise

SAPs experience

Risk quantification

Verbal & written communication

Formação académica

Bachelor’s Degree in related discipline

Ferramentas

Arachni

OWASP ZAP

BurpSuite

Fortify

Checkmarx

EC2

Docker

Nessus

Descrição da oferta de emprego

MTSI is seeking a Information Systems Security Engineer (ISSE) whose primary function will be to serve as the Program Office’s information security professional responsible for managing all aspects of an organization's information security system, including researching, testing, training, and implementing programs designed to safeguard sensitive information from possible compromise.

Your essential job functions will include but may not be limited to:

• The ISSE works with System Engineering teams to incorporate cyber resiliency objectives, techniques, and design principles into all system engineering and development efforts throughout the systems development life cycle (SDLC).
• Develop and maintain documentation and diagrams for security tools, system environments, and cloud operations
• Perform requirements analysis, design, and integration for complex software applications and collaboration infrastructures
• Participate in the change management process, including reviewing Change Requests and assisting in the assessment of security impact of proposed changes
• Write implementation and design documents describing how security features are implemented
• Create and maintain information system security documentation, Standard Operating Procedures (SOP), and provide guidance on active Plans of Action and Milestones (POA&M)
• Conduct periodic and continuous monitoring of the system, procedures, and documentation to ensure compliance with the authorization package

Required

• 10+ years' technical experience in cybersecurity, information technology, or systems engineering
• Must have experience working with Special Access Programs (SAPs)
• Strong proficiency fault tolerance, and Reliability, Maintainability, Availability (RMA) subject matter.
• Must possess excellent analytical skills and be capable of quantifying risk to enterprise systems and level of compliance with security policy
• Excellent communication skills (verbal and written) required

Advanced knowledge in one or more of the following areas

• Java, Python, Ruby and/or C++
• Linux Expertise (RedHat/RHEL or CentOS preferred)
• Dynamic & Static Application Security Scanning (e.g., Arachni, OWASP ZAP, BurpSuite, Fortify, Checkmarx, etc.)
• Virtualization and containers (EC2, Docker)
• Infrastructure Security Scanning, Vulnerability Scanning (Twistlock, ACAS/Nessus)

Certifications

• Certified Information Systems Security Professional (CISSP).
• Certified Cloud Security Professional (CCSP).
• Information Systems Security Engineering Professional (ISSEP)
• DOD Information Technology Security Certification and Accreditation Process (DITSCAP)
• DOD Information Assurance Certification and Accreditation Process (DIACAP)

Education Requirements

• Bachelors Degree in related discipline

Clearance Requirements

• Current/active Top Secret/SCI; Current or recent DoD SAP access

#mtsi

#lawrenciumsaskatchewantrout