Information Systems Security Engineer (ISSE)

CyberPoint International; Maryland; Hybrid; USD 120,000 - 150,000; Full time

Job summary

CyberPoint International seeks an Information Systems Security Engineer (ISSE) to support the design, development, implementation, and assessment of secure information systems across mission-critical environments. You will apply security engineering principles to identify vulnerabilities, assess risks, validate requirements, and develop mitigations throughout the system lifecycle.

You will collaborate with architects, software developers, systems and network engineers, and stakeholders toembed

Qualifications

• U.S. Citizenship is required.
• Active TS/SCI with current polygraph.
• 7+ years as ISSE on similar programs.
• Bachelor's degree in CS, IA, InfoSec, or related field.
• DoD 8570 IASAE Level 2 certification required.
• Experience designing secure networking and enclave environments.
• Experience applying IA policies, risk analysis, and risk management.
• Ability to collaborate with customers and engineering teams to address security requirements.

Responsibilities

• Perform security assessments of computing environments to identify vulnerabilities and risks.
• Recommend mitigation strategies for identified vulnerabilities and risks.
• Validate and verify system security requirements and contribute to secure designs.
• Design, develop, implement, and integrate IA and security systems and components.
• Support environments with multiple enclaves and varied data protection requirements.
• Incorporate IA requirements into systems deployed to operations.
• Assist in identifying and implementing appropriate information security functionality.
• Support development of security architectures and secure system designs.
• Enforce trusted relationships between external systems and architectures.
• Assess and mitigate security threats throughout the lifecycle.
• Identify overall security requirements for government data handling.
• Review C&A documentation for completeness and compliance.
• Support certification and accreditation activities for systems.

Skills

Security Architecture

IA Principles

Risk Management

C&A processes

Secure Networking

Enclave Security

Education

Bachelor's degree

IASAE Level 2

Job description

Information Systems Security Engineer (ISSE) Technical Maryland | Full-Time

As an Information Systems Security Engineer (ISSE) at CyberPoint, you will support the design, development, implementation, integration and assessment of secure information systems and architectures supporting mission-critical environments. You will apply systems security engineering principles to identify vulnerabilities, assess security risks, validate security requirements and develop mitigation strategies throughout the system lifecycle.

You will work closely with architects, software developers, systems engineers, network engineers and mission stakeholders to build security into systems and operational environments. This role requires a strong understanding of Information Assurance (IA) principles, security architecture, risk management, security assessments, and the implementation of secure networking, computing and enclave environments.

When you become a part of CyberPoint, you are joining a dynamic, diverse, fast-growing company that welcomes creative thought and ambition. We're committed to creating an environment where each employee can thrive.

What You'll Do

• Perform and review technical security assessments of computing environments to identify vulnerabilities, security risks, and non-compliance with established Information Assurance (IA) standards and regulations.
• Recommend mitigation strategies to address identified security vulnerabilities and risks.
• Validate and verify system security requirements and contribute to the development of secure system designs.
• Design, develop, implement, and integrate IA and security systems and system components supporting networking, computing, and enclave environments.
• Support environments containing multiple enclaves and differing data protection and classification requirements.
• Incorporate Information Assurance and security requirements into systems deployed to operational environments.
• Assist architects and systems developers in identifying and implementing appropriate information security functionality.
• Support the development and implementation of security architectures and secure system designs.
• Enforce and support the design and implementation of trusted relationships among external systems and architectures.
• Assess and mitigate system security threats and risks throughout the program lifecycle.
• Support security planning, assessment, risk analysis, and risk management activities.
• Identify overall security requirements for the appropriate handling and protection of Government data.
• Review Certification and Accreditation (C&A) documentation and provide feedback regarding completeness, accuracy, and compliance.
• Support certification and accreditation activities for systems and network operations.
• Participate as a security engineering representative on engineering teams supporting the design, development, implementation, evaluation, and integration of secure systems and architectures.
• Interact directly with customers and other project team members to identify requirements, address security concerns, and develop solutions.
• Apply IA policies, procedures, and organizational requirements to the design and implementation of secure environments.
• Support security testing, configuration control, change management, auditing, incident handling, and contingency planning activities.
• Apply security engineering principles across the system engineering lifecycle.
• Document security requirements, assessments, risks, mitigations, architectures, and technical processes.

Overview

This position is 100% onsite and requires an active TS/SCI+FSP Security Clearance.

What We're Looking For

As an Information Systems Security Engineer (ISSE) at CyberPoint, you will support the design, development, implementation, integration and assessment of secure information systems and architectures supporting mission-critical environments. You will apply systems security engineering principles to identify vulnerabilities, assess security risks, validate security requirements and develop mitigation strategies throughout the system lifecycle. You will work closely with architects, software developers, systems engineers, network engineers and mission stakeholders to build security into systems and operational environments. This role requires a strong understanding of Information Assurance (IA) principles, security architecture, risk management, security assessments, and the implementation of secure networking, computing and enclave environments. When you become a part of CyberPoint, you are joining a dynamic, diverse, fast-growing company that welcomes creative thought and ambition. We're committed to creating an environment where each employee can thrive.

Qualifications

What You'll Need

• U.S. Citizenship.
• Active TS/SCI Security Clearance with current polygraph.
• At least 7 years of experience as an Information Systems Security Engineer (ISSE) supporting programs and contracts of similar scope, type, and complexity.
• Bachelor's degree in Computer Science, Information Assurance, Information Security, Systems Engineering, or a related technical discipline from an accredited college or university.
• Four additional years of ISSE experience may be substituted for the Bachelor's degree.
• DoD 8570 compliance with IASAE Level 2 certification/qualification is required.
• Experience supporting the design, development, implementation, evaluation, or integration of secure networking, computing, and enclave environments.
• Experience applying Information Assurance policies, procedures, standards, and security requirements to operational systems.
• Experience with security planning, assessment, risk analysis, and risk management.
• Experience identifying and implementing system security requirements and security controls.
• Experience working with customers, engineering teams, and other technical stakeholders to address security requirements and risks.

What Will Set You Apart

• Experience or familiarity with one or more of the following is highly desired:
  • Security architecture and secure system design.
  • Systems security engineering throughout the engineering lifecycle.
  • Cross-domain solutions.
  • Commercial off-the-shelf (COTS) and government off-the-shelf (GOTS) cryptographic technologies.
  • Identification, authentication, and authorization technologies.
  • System integration and security testing.
  • Intrusion detection and incident handling.
  • Configuration control and change management.
  • Auditing and security monitoring.
  • Contingency planning and continuity of operations.
  • Certification and Accreditation (C&A) processes.
  • Principles of Information Assurance, including:
    • Confidentiality
    • Integrity
    • Availability
    • Access control
    • Non-repudiation
  • Security requirements for systems operating across multiple enclaves or classification levels.
  • Trusted relationships between external systems and architectures.
  • Networking, computing, and enclave security.
  • Security risk assessment and mitigation.
  • Government and enterprise security policies and standards.

Our Culture

Great People, Exceptional Benefits

Great people are the foundation of any great company. To attract and retain great people, CyberPoint offers fulfilling work that we like to balance with the rest of life. To learn more, https://www.cyberpointllc.com/benefits.php.

Be a part of CyberPoint. Be valued.

We are an inclusive community in which all types of diversity are embraced, respected and seen as true value for the company. We are committed to cultivating this community, but we realize there is still more work to do. CyberPoint will continue to evolve into a more inclusive and equitable company and is fully committed to the principles of equal employment opportunity and affirmative action. CyberPoint is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of gender, gender identity or expression, sexual orientation, race, age, religion, physical or mental disability, veterans' status or other federal, state and local protected characteristics. As a federal contractor, CyberPoint has established affirmative action programs to ensure non-discrimination and affirmative action in CyberPoint's policies and practices for qualified women, minorities, protected veterans, and individuals with disabilities. The narrative portion of CyberPoint's affirmative action plans are available for inspection at our offices during normal business hours. Employees and applicants interested in inspecting these plans should contact Human Resources by phone [phone]or by email at [e-mail] for assistance. If you are interested in applying for employment with CyberPoint and need special assistance or an accommodation to apply for a posted position, contact our Human Resources department by email at [e-mail] or by calling 410