Information Systems Security Engineer (ISSE)- Colorado Springs, CO

La Jolla Logic; Denver (CO); On-site; USD 90,000 - 115,000; Full time

Job summary

An established industry player is seeking a skilled Information Systems Security Engineer to enhance Defensive Cyber Operations for the US Space Force. This role involves leading cyber engineering teams, conducting vulnerability assessments, and ensuring compliance with national cybersecurity policies. The ideal candidate will possess strong leadership abilities, a Bachelor’s degree in a related field, and a passion for safeguarding critical infrastructure. Join a dynamic team that values innovation and collaboration, and make a significant impact in the realm of cybersecurity while working on mission-critical projects.

Qualifications

• 4+ years of relevant experience in cybersecurity and system engineering.
• Active Secret security clearance and DoD 8570 Certification required.

Responsibilities

• Lead cyber system engineering teams and support A&A activities.
• Conduct vulnerability assessments and analyze security compliance.

Skills

Cybersecurity

Risk Management Framework (RMF)

Vulnerability Assessment

Communication Skills

Leadership Skills

Problem Solving

Education

Bachelor’s degree in Computer Science

Bachelor’s degree in Engineering

Bachelor’s degree in Information Systems

Tools

ACAS Nessus

Xacta

eMASS

SCAP Scanner

STIG Viewer

Job description

Information Systems Security Engineer (ISSE)- Colorado Springs, CO

La Jolla Logic is looking for a qualified Information Systems Security Engineer (ISSE) to support the Cyber Team in the development and fielding of Defensive Cyber Operations capabilities for the US Space Force (Colorado Springs, CO) utilizing DevSecOps environments and lean agile practices in order to establish enterprise level safeguards such as computer and network systems security and cyber situational awareness, damage assessment and recovery, cyber threat recognition, attribution and mitigation, and active response methodologies across Enterprise Ground Services (EGS) in response to evolving threats and changes to cyber environment. The program’s goal is to ensure delivery of critical infrastructure services and limit or contain the impact of a potential cybersecurity event and to protect the following mission sets: Protected Communications, Missile Warning, Military Strategic Communications (MILSATCOM), Position Navigation and Timing (PNT), Ballistic Missile Command and Control, Space Domain Awareness (SDA), Nuclear Command Control and Communications (NC3), and Command and Control Satellite Operations (C2 Sat Ops).

Salary Range: $90,000-$115,000

Job Description

• Leading and supporting cyber system engineering teams.
• Leading Assessment and Authorization (A&A) activities for DoD and Intelligence Systems in accordance with Risk Management Framework and ICD-503 guidelines.
• Supporting offensive architecture analysis and design of defense-in-depth solutions.
• Developing and assessing system security plans including, security concepts of operation, risk management matrix, security control traceability matrix, security test procedures, and plan of action and milestones.
• Conducting and/or analyzing vulnerability assessments to validate system compliance with RMF controls and DISA Security Technical Information Guidelines (STIGS).
• Analyzing static code scans and dynamic code scans to validate Application Security and Development STIG compliance.
• Leading and coordinating security test event teams to achieve accreditation milestones.
• Verifying and validating vulnerability resolutions and/or mitigations.
• Effectively communicate work plans, milestones (POAM), and obstacles to clients; able to communicate, explain, or defend ideas or information clearly. Listen to others and recognize potential miscommunications, offer clarity.
• Ability to effectively develop system security plans, procedures, and other security documentation.
• Resolve non-routine problems with area of assigned responsibility and timely direct complex problems, questions, or complaints to Program Manager.
• Ability to analyze disparate data and produce a readable, understandable summary to Program Manager, with recommendations for corrective action, as needed; evaluate effectiveness of applied security control.

Requirements

• Bachelor’s degree in related field is highly desired (Computer Science, Engineering, Information Systems, etc.)
• 4+ years of relevant experience
• Active Secret security clearance: U.S. Citizenship is required.
• DoD 8570 Certification (Security+ or equivalent required, CISSP desired)
• Extensive experience with traditional A&A tools: ACAS Nessus, Xacta, eMASS, SCAP Scanner, STIG Viewer.
• Demonstrated expertise in national Cybersecurity policies, DoD or Intelligence Community A&A processes and procedures and industry best practices on complex systems.
• Expertise in vulnerability assessment, control allocation and risk mitigation.
• Understanding of offensive and defensive security tactics, techniques and procedures.
• Experience with cloud architectures is a plus.
• Ability to negotiate effectively with higher level Government leads, managers, functional managers, customers, industry partners, and teammates.
• Demonstrated leadership skills (supervisory experience, building teams, building customer relationships).
• Strong interpersonal and mentoring skills and the ability to effectively build and lead teams.
• Good planning and organizational skills, as well as strong oral and written communication skills.