Information Systems Security Engineer (ISSE)

Modern Technology Solutions, Inc. (MTSI); Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Job summary

Modern Technology Solutions, Inc. (MTSI) is seeking an Information Systems Security Engineer (ISSE) in Washington, DC. The selected candidate will be responsible for managing all aspects of information security systems, ensuring compliance and conducting risk assessments.

Ideal candidates will have over 10 years of experience in cybersecurity, proficiency in various programming and scripting languages, and excellent communication skills. A current Top Secret clearance is required for this position.

Qualifications

• 10+ years' technical experience in cybersecurity, information technology, or systems engineering.
• Experience working with Special Access Programs (SAPs).
• Strong proficiency in fault tolerance and Reliability, Maintainability, Availability (RMA).
• Excellent analytical skills to quantify risk and compliance.
• Excellent verbal and written communication skills.

Responsibilities

• Incorporate cyber resiliency objectives into system engineering efforts.
• Develop and maintain documentation for security tools and environments.
• Conduct requirements analysis and integration for software applications.
• Assist in the change management process for security impact assessment.
• Create and maintain security documentation and SOP.
• Conduct periodic monitoring to ensure compliance.

Skills

Cybersecurity

Systems Engineering

Analytical Skills

Communication Skills

Education

Bachelor's Degree in related discipline

Tools

Java

Python

Ruby

C++

Linux (RedHat/RHEL or CentOS)

Virtualization and containers (EC2, Docker)

Job description

MTSI is seeking an Information Systems Security Engineer (ISSE) whose primary function will be to serve as the Program Office’s information security professional responsible for managing all aspects of an organization's information security system, including researching, testing, training, and implementing programs designed to safeguard sensitive information from possible compromise.

Responsibilities

• The ISSE works with System Engineering teams to incorporate cyber resiliency objectives, techniques, and design principles into all system engineering and development efforts throughout the systems development life cycle (SDLC).
• Develop and maintain documentation and diagrams for security tools, system environments, and cloud operations.
• Perform requirements analysis, design, and integration for complex software applications and collaboration infrastructures.
• Participate in the change management process, including reviewing Change Requests and assisting in the assessment of security impact of proposed changes.
• Write implementation and design documents describing how security features are implemented.
• Create and maintain information system security documentation, Standard Operating Procedures (SOP), and provide guidance on active Plans of Action and Milestones (POA&M).
• Conduct periodic and continuous monitoring of the system, procedures, and documentation to ensure compliance with the authorization package.

Required

• 10+ years' technical experience in cybersecurity, information technology, or systems engineering.
• Must have experience working with Special Access Programs (SAPs).
• Strong proficiency in fault tolerance, and Reliability, Maintainability, Availability (RMA) subject matter.
• Must possess excellent analytical skills and be capable of quantifying risk to enterprise systems and level of compliance with security policy.
• Excellent communication skills (verbal and written) required.

Advanced knowledge in one or more of the following areas

• Java, Python, Ruby and/or C++.
• Linux expertise (RedHat/RHEL or CentOS preferred).
• Dynamic & Static Application Security Scanning (e.g., Arachni, OWASP ZAP, BurpSuite, Fortify, Checkmarx).
• Virtualization and containers (EC2, Docker).
• Infrastructure Security Scanning, Vulnerability Scanning (Twistlock, ACAS/Nessus).

Certifications

• Certified Information Systems Security Professional (CISSP).
• Certified Cloud Security Professional (CCSP).
• Information Systems Security Engineering Professional (ISSEP).
• DOD Information Technology Security Certification and Accreditation Process (DITSCAP).
• DOD Information Assurance Certification and Accreditation Process (DIACAP).

Education Requirements

• Bachelors Degree in related discipline.

Clearance Requirements

• Current/active Top Secret/SCI; Current or recent DoD SAP access.