Information Systems Security Engineer (ISSE)

Arena Technical Resources, LLC; Oklahoma City (OK); Remote; USD 120.000 - 160.000; Vollzeit

Zusammenfassung

Arena Technical Resources, LLC is seeking an Information Systems Security Engineer (ISSE) to support USPS DOIS modernization from a remote location in the United States. The ideal candidate will bring 5+ years of security engineering experience with a strong cloud security focus and be capable of leveraging AI tools for automation and vulnerability management.

The role requires eligibility for a Public Trust, strong knowledge of federal standards (FISMA, NIST), and effective collaboration with

Qualifikationen

• 5+ years of information security engineering with a focus on cloud security.
• Experience with AI tools, particularly GitHub Copilot, for security automation and vulnerability management.
• Strong understanding of federal security standards and compliance requirements (FISMA, NIST, FedRAMP).
• Bachelor's degree preferred or an additional 4 years of relevant work experience.
• US residency eligibility and ability to obtain/maintain required security clearances.

Aufgaben

• Develop, implement, and maintain security policies, procedures, and controls per USPS requirements and federal standards (FISMA, NIST RMF).
• Use AI tools (GitHub Copilot) to automate security tasks, vulnerability scans, and code reviews.
• Conduct regular security assessments, vulnerability scans, and penetration testing with Nessus, Splunk, and SonarQube-like tools.
• Implement and monitor security measures for sensitive data with encryption and access controls.
• Work with Dev and Ops to integrate security into CI/CD and DevSecOps processes.
• Prepare and maintain security documentation (SSP, RMP, POA&M).
• Ensure continuous monitoring and real-time incident response using CloudWatch, GuardDuty, and AWS Security Hub.
• Collaborate with USPS CISO to ensure compliance with USPS security architecture and governance.
• Provide security training and awareness for development and operations staff.

Kenntnisse

Security tools

Analytical skills

Communication

Multitasking

Ausbildung

Bachelor's degree in CS/IT/Cyber Security

Additional 4 years of experience without degree

Tools

Nessus

Splunk

NIST RMF

GitHub Copilot

Jobbeschreibung

Job Title: Information Systems Security Engineer (ISSE)
Job Location: Remote
Eligibility/Clearance: Must be able to obtain and maintain a Public
Trust and successfully pass a thorough Government background screening
process requiring the completion of detailed forms and fingerprinting

This position has a U.S. residency requirement.The USPS security
clearance process requires the selected candidate to have resided in the
U.S. (including U.S. Territories) for the last five years as
follows:U.S. Citizens cannot have left the U.S. (including U.S.
Territories) for longer than 6 months consecutively in the last 3 years
(unless they meet certain exceptions). Non-U.S. Citizens cannot have
left the U.S. (including U.S. Territories) for longer than 90 days
consecutively in the last 3 years.

Job Description Summary:
Seize your opportunity to make a personal impact as a Information
Systems Security Engineer (ISSE). We are seeking a highly skilled
Information Systems Security Engineer with over 5 years of experience in
Application Modernization to join our dynamic team. The position will
play a critical role in the modernization of the Delivery Operations
Information System (DOIS) for the United States Postal Service (USPS).
The Information Systems Security Engineer will ensure the security of
the DOIS modernization project for USPS by implementing robust security
measures and maintaining compliance with federal security standards. The
individual will leverage AI tools such as GitHub Copilot for security
automation and vulnerability management.

We are excited to welcome a motivated Information Systems Security
Engineer who is passionate about creating exceptional user experiences
and driving innovation in web development. Join us in shaping the future
of our products and services through cutting-edge technology!

HOW AN INFORMATION SYSTEMS SECURITY ENGINEER WILL MAKE AN IMPACT:

• Develop, implement, and maintain security policies, procedures, and controls in alignment with USPS’s security requirements and federal standards (e.g., FISMA, NIST RMF).
• Utilize AI tools like GitHub Copilot to automate security tasks, vulnerability scans, and code reviews.
• Conduct regular security assessments, vulnerability scans, and penetration testing using tools such as Nessus, Splunk, and SonarQube.
• Implement and monitor security measures for sensitive data, ensuring compliance with encryption standards and access controls.
• Work with development and operations teams to integrate security practices within CI/CD pipelines and DevSecOps processes.
• Prepare and maintain security documentation, including System Security Plans (SSP), Risk Mitigation Plans (RMP), and Plan of Action and Milestones (POA&M).
• Ensure continuous monitoring and real-time security incident response using tools such as CloudWatch, GuardDuty, and AWS Security Hub.
• Collaborate with the USPS Chief Information Security Office (CISO) to ensure compliance with USPS’s security architecture and governance.
• Provide security training and awareness programs to development and operational staff.

WHAT YOU’LL NEED TO SUCCEED:

Education:

• Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or related fields, preferred but not required.
• If there is no relevant college degree, an additional 4 years of relevant work experience is required.

Required Experience:

• 5+ years of experience in information security engineering, with a strong focus on cloud security.
• Experience with AI tools, particularly GitHub Copilot, for security automation and vulnerability management.
• Strong understanding of federal security standards and compliance requirements (e.g., FISMA, NIST, FedRAMP).

Required skills:

• Proficiency in security tools and frameworks (e.g., Nessus, Splunk, NIST RMF).
• Excellent analytical, problem-solving, and communication skills.
• Able to manage multiple tasks effectively and meet deadlines.
• Ability to work collaboratively with developers, business analysts, and stakeholders.

Desired Skills:

• Security Certifications (e.g., CISSP, CISM, AWS Certified Security - Specialty).
• Experience in a USPS environment or similar federal IT projects.
• Certification in cybersecurity (e.g., Certified Ethical Hacker (CEH)).

Location:

• Remote

Arena Technical Resources, LLC, (ATR) is an Equal Opportunity Employer (EOE) who will provide equal employment opportunity to employees and applicants for employment without regard to race, ethnicity, religion, color, sex, pregnancy, national origin, age, veteran status, ancestry, sexual orientation, gender identity or expression, marital status, family structure, genetic information, or mental or physical disability.