Information Systems Security Engineer (ISSE)

TekSynap; Arlington (VA); On-site; USD 130,000 - 160,000; Full time

Job summary

TekSynap is seeking an ISSE to provide cyber security and security engineering services for the NMCC program. The role includes system security engineering, risk assessments, and security architecture support, with a focus on HBSS, ACAS, ePO, Nessus, and DISA processes.

We value candidate initiative, ability to work independently, and strong communication. Location is Arlington, VA in a full-time office environment with a competitive benefits package.

Qualifications

• Active TS/SCI security clearance.
• Active CompTIA Security+ certification.
• Bachelor's degree in CS/IT or related field; substitutions allowed as described.
• 5+ years of experience with systems engineering, including design and architecture.
• Identify security risks across OS, hardware, and data transfer protocols.
• Effective communication and presentation skills.
• Strong planning, organizational, and time management skills.
• Initiative and ability to work independently.

Responsibilities

• Build, deploy, and patch HBSS Windows and ACAS RedHat Linux servers.
• Maintain and patch ePO, Security Center, and Nessus servers.
• Provide Security Center accounts for Vulnerability Managers to scan devices in ACAS.
• Remediate ACAS scan results and vulnerabilities.
• Obtain licenses for HBSS ePOs and Tenable Security Centers.
• Obtain HBSS and ACAS kickstart ISOs from DISA.
• Configure McAfee policies and STIG HBSS/ACAS environments.
• Run SCAP scans on Windows and RHEL servers.
• Update RedHat RPMs; set up yum local repositories for offline patches.
• Deploy Rogue sensors; identify rogue subnets and endpoints.
• Troubleshoot Security Center and Nessus issues.
• Design and maintain complex IT systems; establish cybersecurity networking rules.
• Lead development of technical solutions from requirements to deployment; document results.

Skills

TS/SCI clearance

Security+ certification

Security engineering

Effective communication

Independent work

Education

Bachelor's degree in CS/IT or related field

Master's degree with 3 years experience

No degree with 12 years experience

Tools

HBSS ePO

Nessus

ACAS

McAfee ePO

RedHat Linux 7.9/8

SCAP scans

yum repos

Job description

Responsibilities & Qualifications

• Responsible for building, deploying and Patching HBSS Windows and ACAS RedHat Linux 7.9 and 8 servers.


• Responsible for building, maintaining, and patching all ePO, Security Center, and Nessus servers.


• Provides Security Center accounts for Vulnerability Managers to scan devices within ACAS.


• Experience with ACAS scan results and how to remediate vulnerability findings.


• Knowledge of the process of obtaining licenses for all HBSS ePO’s and Tenable Security Centers.


• Expertise in the process of obtaining HBSS and ACAS kickstart ISOs from DISA.


• Extensive knowledge of building virtual servers, deploying, and patching all McAfee modules via the ePO, configuring McAfee policies for each environment, STIGing HBSS Windows OS, McAfee policies to comply with benchmarks (Not reviewing or confirming), and STIGing ACAS RHEL servers.


• Ability to Run SCAP scans on Windows and RHEL servers.


• Displays knowledge of updating RedHat 7.9 and 8 rpms as they are released, including setting up RedHat yum local rpm repositories to patch offline ACAS servers.


• Deploying Rogue sensors on each subnet, and identifying Rogue subnets and endpoints.


• Able to troubleshoot Security Center and Nessus scanner issues.


• Design, implement, and maintain complex information technology systems.


• Design the basic computing infrastructure to accomplish key tasks, establishing networking rules for cybersecurity, and troubleshooting network errors or other technical issues.


• Lead the development of technical solutions, from refining customer requirements through design, build, test, and deployment. Document and communicate technical solutions and results of analyses leading to recommended courses of action.

Required Qualifications

• Active TS/SCI security clearance.


• Active CompTIA Security+ certification.


• A bachelor’s degree in computer science, information technology, or a related field. Education and experience requirements may be substituted with:




• 1.) A master’s degree (in subjects described above) and 3 years of experience.


• 2.) No degree with 12 years of intensive and progressive experience demonstrating the required proficiency levels related to task.




• 5+ years of experience with all aspects of systems engineering, including design and architecture.


• Demonstrated capability to identify security risks throughout information system network structures to include the Operating Systems, hardware, and various data transfer protocols.


• Effective communication and presentation skills (i.e., ability to present ideas effectively in formal and informal situations in group and individual settings).


• Strong planning, organizational, and time management skills (i.e., ability to effectively plan, organize, and prioritize work, and to control and follow up to assure work completion).


• Demonstrated initiative (i.e., initiate appropriate action without being directed) and ability to work independently.

Overview

We are seeking an ISSE to provide cyber security and security engineering services for the National Military Command Center (NMCC) customer including system security engineering, cybersecurity risk assessments, and security architecture support.

TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. “Technology moving at the speed of thought” embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers.

We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays.

Additional Job Information

WORK ENVIRONMENT AND PHYSICAL DEMANDS

• Location: Arlington, VA


• Type of environment: Office


• Noise level: Medium


• Work schedule: Schedule is day shift Monday – Friday. May be requested to work evenings and weekends to meet program and contract needs.


• Amount of Travel: less than 10%

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to use hands to grip, handle, or feel; reach with hands and arms; and talk or hear. The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl. The employee is regularly required to lift up to 10 pounds.

The employee is frequently required to lift up to 25 pounds; and up to 50 pounds. The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus.

WORK AUTHORIZATION/SECURITY CLEARANCE

• US Citizen


• Active TS/SCI clearance

WAGE INFORMATION

Target salary range: $130,000.00 - $160,000.00. The salary range displayed is an estimate only and is not a guarantee of compensation or salary, and will be determined on several factors regarding the individual’s particular combination of education, knowledge, skills, competencies and experience, as well as contract parameters and organizational requirements. The displayed salary is one component of the total compensation package for employees.

Other Information

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

TekSynap is a drug-free workplace. We reserve the right to conduct drug testing in accordance with federal, state, and local laws. All employees and candidates may be subject to drug screening if deemed necessary to ensure a safe and compliant working environment.

Many positions require specific certifications and/or the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. Applicants who accept an offer of employment may be subject to investigations performed by TekSynap and/or the Government to verify the candidate meets the required qualifications and other eligibility requirements.

EQUAL EMPLOYMENT OPPORTUNITY

In order to provide equal employment and advancement opportunities to all individuals, employment decisions will be based on merit, qualifications, and abilities. TekSynap does not discriminate against any person because of race, color, creed, religion, sex, sexual orientation, gender identity, protected veteran status, national origin, disability, age, genetic information or any other characteristic protected by law (referred to as “protected status”). This nondiscrimination policy extends to all terms, conditions, and privileges of employment as well as the use of all company facilities, participation in all company-sponsored activities, and all employment actions such as promotions, compensation, benefits, and termination of employment.

TekSynap is committed to ensuring that our online application process provides an equal employment opportunity to all job seekers, including individuals with disabilities. If you believe you need a reasonable accommodation in order to search for a job opening or to submit an application, please contact [e-mail] for assistance.