Information Systems Security Engineer (ISSE) - Cyber Security Engineer (TS/SCI)

RiseMe; Arlington (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) with company matching

Paid Time Off

Job summary

KaylaTek is seeking an ISSE to provide cyber security and security engineering services for the NMCC. The role includes system security engineering, risk assessments, and security architecture support on a Pentagon-based, 100% on-site environment.

You will build and patch HBSS/ACAS environments, manage ePO and Nessus, and ensure compliance through STIGs and SCAP scans. Requires TS/SCI, Security+ CE, and 5+ years in systems engineering.

Qualifications

• TS/SCI security clearance
• Active CompTIA Security+ CE (8140) certification
• Bachelor's degree in computer science, information technology, or related (or a master’s with 3 years experience; or 12 years experience in lieu of degree)
• 5+ years of experience in systems engineering including design and architecture
• Ability to identify security risks across OS, hardware, and data transfer protocols
• Effective communication and presentation skills
• Strong planning and time management skills; ability to work independently

Responsibilities

• Perform or review technical security assessments of computing environments to identify vulnerabilities and compliance gaps
• Build, deploy, and patch HBSS Windows and ACAS RedHat Linux servers
• Maintain and patch ePO, Security Center, and Nessus servers
• Provide Security Center accounts for Vulnerability Managers to scan devices
• Remediate vulnerabilities based on ACAS scan results
• Obtain licenses for HBSS ePOs and Tenable Security Centers
• Acquire HBSS and ACAS kickstart ISOs from DISA
• Configure McAfee policies via ePO across environments
• STIG HBSS Windows OS and ACAS RHEL to benchmarks
• Run SCAP scans on Windows and RHEL
• Update RedHat 9/8 RPMs as released
• Setup RedHat yum repositories for offline patching
• Deploy Rogue sensors and identify rogue subnets/endpoints
• Troubleshoot Security Center and Nessus issues

Skills

TS/SCI clearance

Security+ CE

Systems engineering

Security risk assessment

Technical communication

Planning & time management

Independent work

Education

Bachelor's degree in computer science / information technology

Master's degree +3 years experience

No degree with 12 years experience

Tools

HBSS

ePO

ACAS

Nessus

Tenable Security Center

SCAP

Job description

KaylaTek Overview

Come join our growing team with a 21st Century Vision! At KaylaTek, we understand that the key to our success is the quality of the people we employ. Our focus is not just on jobs, but on building and enhancing your career through ongoing professional development, training, and high quality of life. Our team members choose KaylaTek for a number of reasons including our competitive compensation and benefit packages, dedication to education, as well as our outstanding service. Our Grow Strong Vision encompasses a place for employees to grow, learn and feel a sense of belonging, not just a place to work.

Employee Benefit Offerings

Medical, Dental, Vision, Dependent Care FSA, HSA, 401(k) with company matching, Short-Term and Long-Term Disability, Life and AD and D Insurance, Paid Time Off, 11 Paid Holidays, Employee Assistance Program (EAP), Professional Development Program, Referral Bonuses, Military Support and much more.

Job Site:

Pentagon - 100% on site

Shift Hours:

Day-Shift; core support hours are 0600 -1800. This is a 24/7/365 support environment; off-hours response/support may be required, however only standard M-F core hours working time for current position.

Summary

Our Cybersecurity Team is searching for an ISSE to provide cyber security and security engineering services for the National Military Command Center (NMCC) customer including system security engineering, cybersecurity risk assessments, and security architecture support.

Roles and Responsibilities:

The ISSE shall perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established cybersecurity standards and regulations and recommended mitigation strategies.

This includes:

• Responsible for building, deploying and Patching HBSS Windows and ACAS RedHat Linux 7.9 and 8 servers.
• Responsible for building, maintaining, and patching all ePO, Security Center, and Nessus servers.
• Provides Security Center accounts for Vulnerability Managers to scan devices within ACAS.
• Experience with ACAS scan results and how to remediate vulnerability findings.
• Knowledge of the process of obtaining licenses for all HBSS ePO's and Tenable Security Centers.
• Expertise in the process of obtaining HBSS and ACAS kickstart ISOs from DISA.
• Extensive knowledge of building virtual servers, deploying, and patching all McAfee modules via the ePO, configuring McAfee policies for each environment
• STIGing HBSS Windows OS, McAfee policies to comply with benchmarks (Not reviewing or confirming), STIGing ACAS RHEL
• Ability to Run SCAP scans on Windows and RHEL
• Displays knowledge of updating RedHat 9 and 8 rpms as they are released
• Setup RedHat yum local rpm repositories to patch offline ACAS servers.
• Deploying Rogue sensors on each subnet, Identifying Rogue subnets and rogue endpoints.
• Able to troubleshoot Security Center and Nessus scanner issues.

Qualifications:

• Qualified candidates must possess a TS/SCI security clearance.

• Active CompTIA Security+ CE certification (8140 compliant)

• A Bachelor's Degree in computer science, information technology, or related. Education and experience requirements may be substituted with: 1. a master's degree (in subjects described above) and 3 years of experience. 2. No degree with 12 years of intensive and progressive experience demonstrating the required proficiency levels related to task.

• 5+ years of experience in understanding all aspects of systems engineering, including design and architecture.

• Demonstrated capability to identify security risks throughout information system network structures to include the Operating Systems, hardware, and various data transfer protocols.

• Effective communication and presentation skills (i.e., ability to present ideas effectively in formal and informal situations in group and individual settings).

• Strong planning,organizational, and time management skills (i.e., ability to effectively plan, organize, and prioritize work, and to control and follow up to ensure work completion).

• Demonstrated initiative (i.e. initiate appropriate action without being directed) and ability to work independently

MUST BE A US CITIZEN

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.

EQUAL OPPORTUNITY EMPLOYER

KaylaTek is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

E-VERIFY AND BACKGROUND CHECKS

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. KaylaTek participates in the DHS e-Verify program. KaylaTek also conducts a background check on all candidates post offer though PROScreening LLC.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form (I-9) upon hire. KaylaTek participates in the DHS e-Verify program. KaylaTek also conducts background checks (criminal, education, prior employment and professional certifications/licensing) on all candidates post offer though PROScreening LLC.

The Air Force National Capital Regional (AFNCR) IT Services Contract also requires pre-employment drug testing and annual drug testing for all hires to work on contract with the Air Force. This is at no cost the candidate/employee