Information Systems Security Engineer (ISSE)

Abacus Technology Corporation; Lincoln (NE); On-site; USD 80,000 - 100,000; Full time

Job summary

An established industry player is looking for an Information System Security Engineer to join their dynamic team. This full-time role involves supporting vital cybersecurity initiatives for a high-profile program at a military base. You will be responsible for integrating security requirements into IT products, employing best practices for security controls, and coordinating with various stakeholders. With a focus on enhancing information assurance and compliance with government security policies, this position offers an exciting opportunity to make a significant impact in the defense sector. If you have a strong background in cybersecurity and thrive in a collaborative environment, this role is perfect for you.

Qualifications

• 10+ years of experience in cybersecurity and information assurance.
• Must hold a certification like CAP, CASP+ CE, CISM, or CISSP.

Responsibilities

• Capture and refine information security requirements for IT systems.
• Support RMF activities and coordinate with security architects.

Skills

Cybersecurity

Information Assurance

Security Engineering

Software Engineering Methodologies

Secure Design

Secure Coding Techniques

Education

Bachelor’s degree in a related field

Tools

NIST Standards

Risk Management Framework (RMF)

Job description

Overview

Abacus Technology is seeking an Information System Security Engineer (ISSE) to support all aspects of acquisition, system engineering reviews, and milestone entrance/exit criteria for the EPASS program at Hanscom AFB. This is a full-time position.

Responsibilities

• Capture and refine information security requirements and ensure that the requirements are effectively integrated into information technology component products and information systems through purposeful security architecting, design, development, and configuration.
• Function as an integral part of the development team to include designing and developing organizational information systems or upgrading legacy systems.
• Employ best practices when implementing security controls within an information system including; software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques.
• Coordinate security-related activities with information security architects, senior information security officers, information system owners, common control providers, and information system security officers.
• Support RMF activities including: select security controls; apply overlays and tailor; and implement control solutions consistent with DoD Component Cybersecurity architectures.
• Support stakeholders on the following: Common Control Identification; document security controls implementation in the security plan; develop and approve Security Assessment plan; conduct initial remediation actions; assess selected controls annually; conduct needed remediation; and update security plan, SAR and POA&M.

Qualifications

10+ years experience with cybersecurity, information assurance, and certification and accreditation including at least 3 years in a DoD environment. Bachelor’s degree in a related field. Must hold one of the following certifications: CAP, CASP+ CE, CISM, and/or CISSP. Experience in the development of both common user and special purpose command and control/information systems with increasing responsibilities in the scope and magnitude of the systems for which solutions have been implemented. Understanding of security policy advocated by the U.S. Government including Department of Defense and appropriate civil agencies, e.g., NIST. Must be a US Citizen and hold a current Secret clearance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

EOE/M/F/Vet/Disabled