Information Systems Security Engineer (ISSE)

Absolute Business Solutions Corp; United States; On-site; USD 120,000 - 206,000; Full time

Benefits offered by this job

Generous PTO

401k match

Professional development

Tuition assistance

Volunteer time

Job summary

Absolute Business Solutions Corp ABSC seeks an ISSE to support the NMCC at the Pentagon in Arlington, VA. You will drive cybersecurity engineering, risk assessments, and security architecture for critical DoD missions.

The role requires an active TSSCI clearance and hands-on HBSS/ACAS/ePO/Nessus experience, with Windows and RHEL hardening and STIG compliance. On-site with some telework as mission permits.

Qualifications

• Active TSSCI security clearance.
• Current CompTIA Security certification.
• At least five years of relevant systems engineering experience.
• Experience administering HBSS/ACAS/ePO/Nessus environments.
• Experience building, deploying, maintaining, patching Windows and RHEL servers.
• Experience applying STIGs and cybersecurity benchmarks.

Responsibilities

• Provide cybersecurity and security engineering services including system security engineering, risk assessments and security architecture support.
• Perform and review technical security assessments of computing environments.
• Identify vulnerabilities and noncompliance with security standards and regulations.
• Develop mitigation strategies and corrective actions.
• Build, maintain and patch HBSS, ePO, and Tenable/Nessus environments.
• Configure McAfee policies and SecurityCenter to meet environment needs.
• Communicate complex findings to technical teams and leadership.

Skills

Active problem solving

Security risk assessments

Technical writing

Communication with stakeholders

Independent work

Education

Bachelor's degree

Master's degree

No degree with 12+ years experience

Tools

HBSS

ACAS

ePO

Tenable SecurityCenter

Nessus

Windows

Red Hat Enterprise Linux

Job description

Absolute Business Solutions Corp ABSC is not just another technology company Were a community of innovators engineers cybersecurity professionals analysts and business leaders working together to solve some of the nations most complex security challenges For more than 20 years we have supported critical Department of Defense DoD Intelligence Community IC and Federal Civilian missions As we continue to grow were looking for exceptional professionals ready to make a meaningful mission impact AFNCR ITS 2 delivers and protects the enterprise IT infrastructure supporting some of the nations most critical defense command and control and senior leader operations This is more than routine cybersecurity support it is an opportunity to help secure the systems and networks that must remain available resilient and trusted when the mission matters most ABSC is seeking an experienced Information Systems Security Engineer ISSE to support the Air Force within the National Military Command Center NMCC The ISSE will provide cybersecurity and security engineering expertise for the NMCC including technical security assessments vulnerability management system hardening security architecture support and cybersecurity risk mitigation The successful candidate will bring hands on expertise with Host Based Security System HBSS Assured Compliance Assessment Solution ACAS Tenable SecurityCenter Nessus Windows and Red Hat Enterprise Linux environments

Work Location Full time onsite at the NMCC at the Pentagon in Arlington VA with adhoc telework based on mission requirements and prior client approval Schedule Flexible; core hours are 7am 3pm Security Clearance An active TSSCI security clearance is required

Responsibilities

• The Information Systems Security Engineer will Provide cybersecurity and security engineering services including system security engineering cybersecurity risk assessments and security architecture support.
• Perform and review technical security assessments of computing environments.
• Identify system vulnerabilities cybersecurity risks and instances of noncompliance with established security standards and regulations.
• Develop and recommend mitigation strategies and corrective courses of action.
• Build deploy maintain and patch HBSS Windows servers and ACAS Red Hat Enterprise Linux 79 and 8 servers.
• Build maintain secure and patch McAfee ePolicy Orchestrator Tenable SecurityCenter and Nessus servers.
• Create and manage SecurityCenter accounts for vulnerability managers conducting ACAS scans.
• Analyze ACAS scan results and support the remediation of identified vulnerabilities.
• Obtain and manage required licenses for HBSS ePO and Tenable SecurityCenter environments.
• Obtain HBSS and ACAS Kickstart ISO images from the Defense Information Systems Agency.
• Build and administer virtual servers supporting cybersecurity operations.
• Deploy configure and patch McAfee modules through ePolicy Orchestrator.
• Develop and configure McAfee policies appropriate to each supported environment.
• Apply Security Technical Implementation Guides to HBSS Windows operating systems McAfee policies and ACAS Red Hat Enterprise Linux servers.
• Configure McAfee policies to comply with applicable security benchmarks.
• Run Security Content Automation Protocol scans on Windows and Red Hat Enterprise Linux servers.
• Update Red Hat Enterprise Linux 79 and 8 RPM packages as releases become available.
• Establish and maintain local YUM repositories to patch offline ACAS servers.
• Deploy Rogue System Detection sensors across applicable network subnets.
• Identify rogue subnets and endpoints and support appropriate remediation actions.
• Troubleshoot Tenable SecurityCenter and Nessus scanner issues.
• Document technical solutions assessment results cybersecurity risks and recommended courses of action.
• Communicate complex technical findings clearly to technical teams government stakeholders and leadership.
• Work independently exercise sound judgment and initiate appropriate action without requiring continuous direction.

Required Qualifications

• Active TSSCI security clearance
• Current CompTIA Security certification
• At least five years of relevant systems engineering experience
• Demonstrated understanding of systems engineering including system design and architecture
• Hands on experience administering and securing HBSS ACAS ePO Tenable SecurityCenter or Nessus environments
• Experience building deploying maintaining and patching Windows and Red Hat Enterprise Linux servers
• Experience applying STIGs and other cybersecurity benchmarks to operating systems security tools and enterprise environments
• Ability to interpret vulnerability scan results and develop or implement appropriate remediation actions
• Demonstrated ability to identify cybersecurity risks across information system and network architectures including operating systems hardware and data transfer protocols
• Strong planning organizational prioritization and time management skills
• Effective written verbal briefing and presentation skills
• Ability to communicate technical information effectively in both formal and informal settings
• Demonstrated initiative and ability to work independently
• Ability to work full time onsite in the NMCC environment

Education and Experience

• Candidates must meet one of the following combinations Bachelors degree At least five years of relevant experience
• Masters degree At least three years of relevant experience
• No degree At least 12 years of intensive and progressive experience demonstrating the required technical proficiency
• Qualifying degrees should be in computer science information technology cybersecurity engineering or a closely related discipline

Salary

Salary is commensurate with education experience knowledge skills abilities and qualifications The anticipated salary range for this requisition is 120000 206000 annually This range represents the anticipated compensation for the position and is not a guarantee of compensation or an offer amount The actual salary offered will depend on factors including the positions responsibilities relevant education and certifications years and depth of experience specialized technical expertise security clearance internal equity contractual labor category requirements applicable market data and other applicable laws or requirements

Who We Are

ABSC is a technology and services company that combines the agility of a small business with proven processes refined over more than two decades We specialize in supporting public sector clients across the Intelligence Defense Health and Safety mission areas Our team delivers the next generation of people programs and technical solutions needed to advance innovation agility resilience and security across the federal government

Benefits

• Generous PTO plus 11 federal holidays
• 401k retirement plan with company match and immediate vesting
• Annual health and wellness allowance
• Annual professional development funding for education training certifications and technology tools
• Eight hours of paid volunteer time annually
• Charitable donation matching
• Internal and external employee referral bonuses
• Living Our Values recognition and bonus awards

ABSC offers generous external referral bonuses you do not need to be an ABSC employee to participate in our Referral Program

ABSC is a proud Virginia Values Veterans V3 member recognizing our commitment to recruiting hiring and retaining veterans

Veterans are encouraged to identify their military service when applying

Equal Opportunity Employer including veterans and individuals with disabilities