Information Systems Security Engineer (ISSE)

Abacus Technology; Lexington (MA); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a dedicated Information Systems Security Engineer to enhance the security posture of critical systems. This full-time role involves collaborating with development teams to integrate robust security measures into IT products and systems. The ideal candidate will have extensive experience in cybersecurity, particularly within the DoD environment, and hold relevant certifications. This role not only offers the chance to work on significant projects but also to contribute meaningfully to national security efforts. If you are passionate about protecting vital information systems and thrive in a collaborative setting, this opportunity is for you.

Qualifications

• 10+ years experience in cybersecurity and information assurance.
• Must hold certifications like CAP, CASP+ CE, CISM, or CISSP.

Responsibilities

• Capture and refine information security requirements.
• Support RMF activities and implement security controls.

Skills

Cybersecurity

Information Assurance

System Security Engineering

Secure Coding Techniques

Risk Management Framework (RMF)

Education

Bachelor's degree in a related field

Tools

Security Assessment Plan Development

Security Controls Implementation

Job description

Information Systems Security Engineer (ISSE)

Job Locations

US-MA-Hanscom AFB

Job ID

2024-7967

Overview

Abacus Technology is seeking an Information System Security Engineer (ISSE) to support all aspects of acquisition, system engineering reviews, and milestone entrance/exit criteria for the EPASS program at Hanscom AFB. This is a full-time position.

Responsibilities

Capture and refine information security requirements and ensure that the requirements are effectively integrated into information technology component products and information systems through purposeful security architecting, design, development, and configuration.
• Function as an integral part of the development team to include designing and developing organizational information systems or upgrading legacy systems.
• Employ best practices when implementing security controls within an information system including; software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques.
• Coordinate security-related activities with information security architects, senior information security officers, information system owners, common control providers, and information system security officers.
• Support RMF activities including: select security controls; apply overlays and tailor; and implement control solutions consistent with DoD Component Cybersecurity architectures.
• Support stakeholders on the following: Common Control Identification; document security controls implementation in the security plan; develop and approve Security Assessment plan; conduct initial remediation actions; assess selected controls annually; conduct needed remediation; and update security plan, SAR and POA&M.

Qualifications

10+ years experience with cybersecurity, information assurance, and certification and accreditation including at least 3 years in a DoD environment. Bachelor's degree in a related field. Must hold one of the following certifications: CAP, CASP+ CE, CISM, and/or CISSP. Experience in the development of both common user and special purpose command and control/information systems with increasing responsibilities in the scope and magnitude of the systems for which solutions have been implemented. Understanding of security policy advocated by the U.S. Government including Department of Defense and appropriate civil agencies, e.g., NIST. Must be a US Citizen and hold a current Secret clearance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

EOE/M/F/Vet/Disabled