Information Systems Security Engineer (ISSE) - Cyber Security Engineer (TS/SCI)

KaylaTek, Inc.; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k) with company matching

Paid Time Off

11 Paid Holidays

Professional Development Program

Referral Bonuses

Job summary

KaylaTek’s Cybersecurity Team is seeking an ISSE to provide cyber security and security engineering services for the NMCC customer, including system security engineering, cybersecurity risk assessments, and security architecture support.

The ISSE will build, deploy, patch HBSS Windows and ACAS RedHat Linux environments, manage Security Center and Nessus deployments, and enable vulnerability remediation while ensuring compliance with DISA STIGs and regulatory requirements.

Qualifications

• Must possess a TS/SCI clearance.
• Active CompTIA Security+ CE certification (8140 compliant).
• Bachelor's degree in CS/IT or related; substitutions allowed with advanced experience.
• 5+ years in systems engineering, including design and architecture.
• Ability to identify security risks across OS, hardware, and protocols.
• Strong communication and presentation skills.
• Excellent planning, organizational and time management.
• Independent work mentality with initiative.

Responsibilities

• Perform security assessments of computing environments to identify vulnerabilities and non-compliance with standards.
• Build, deploy and patch HBSS Windows and ACAS RedHat Linux servers.
• Maintain and patch all ePO, Security Center, and Nessus servers.
• Provide Security Center accounts for Vulnerability Managers to scan devices.
• Experience with ACAS scan results and remediation of findings.
• Knowledge of licenses for HBSS ePOs and Tenable Security Centers.
• STIGing HBSS Windows OS and ACAS RHEL; configure and manage McAfee policies via ePO.
• Run SCAP scans on Windows and RHEL and patch RPMs; manage offline repositories.

Skills

TS/SCI clearance

Security risk assessment

Systems engineering

Effective communication

Independent work

Time management

Initiative

Education

Bachelor's degree in CS/IT or related

Tools

HBSS ePO

Tenable Security Center

ACAS

Nessus

RedHat Linux

Job description

KaylaTek Overview

Come join our growing team with a 21st Century Vision! At KaylaTek, we understand that the key to our success is the quality of the people we employ. Our focus is not just on jobs, but on building and enhancing your career through ongoing professional development, training, and high quality of life. Our team members choose KaylaTek for a number of reasons including our competitive compensation and benefit packages, dedication to education, as well as our outstanding service. Our Grow Strong Vision encompasses a place for employees to grow, learn and feel a sense of belonging, not just a place to work.

Employee Benefit Offerings

Medical, Dental, Vision, Dependent Care FSA, HSA, 401(k) with company matching, Short-Term and Long-Term Disability, Life and AD and D Insurance, Paid Time Off, 11 Paid Holidays, Employee Assistance Program (EAP), Professional Development Program, Referral Bonuses, Military Support and much more.

Job Site: Pentagon - 100% on site

Shift Hours: Day-Shift; core support hours are 0600 -1800. This is a 24/7/365 support environment; off-hours response/support may be required, however only standard M-F core hours working time for current position.

Summary

Our Cybersecurity Team is searching for an ISSE to provide cyber security and security engineering services for the National Military Command Center (NMCC) customer including system security engineering, cybersecurity risk assessments, and security architecture support.

Roles and Responsibilities:

The ISSE shall perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established cybersecurity standards and regulations and recommended mitigation strategies.

This includes:

• Responsible for building, deploying and Patching HBSS Windows and ACAS RedHat Linux 7.9 and 8 servers.
• Responsible for building, maintaining, and patching all ePO, Security Center, and Nessus servers.
• Provides Security Center accounts for Vulnerability Managers to scan devices within ACAS.
• Experience with ACAS scan results and how to remediate vulnerability findings.
• Knowledge of the process of obtaining licenses for all HBSS ePO's and Tenable Security Centers.
• Expertise in the process of obtaining HBSS and ACAS kickstart ISOs from DISA.
• Extensive knowledge of building virtual servers, deploying, and patching all McAfee modules via the ePO, configuring McAfee policies for each environment
• STIGing HBSS Windows OS, McAfee policies to comply with benchmarks (Not reviewing or confirming), STIGing ACAS RHEL
• Ability to Run SCAP scans on Windows and RHEL
• Displays knowledge of updating RedHat 9 and 8 rpms as they are released
• Setup RedHat yum local rpm repositories to patch offline ACAS servers.
• Deploying Rogue sensors on each subnet, Identifying Rogue subnets and rogue endpoints.
• Able to troubleshoot Security Center and Nessus scanner issues.

Qualifications:

• Qualified candidates must possess a TS/SCI security clearance.
• Active CompTIA Security+ CE certification (8140 compliant)
• A Bachelor's Degree in computer science, information technology, or related. Education and experience requirements may be substituted with: 1. a master's degree (in subjects described above) and 3 years of experience. 2. No degree with 12 years of intensive and progressive experience demonstrating the required proficiency levels related to task.
• 5+ years of experience in understanding all aspects of systems engineering, including design and architecture.
• Demonstrated capability to identify security risks throughout information system network structures to include the Operating Systems, hardware, and various data transfer protocols.
• Effective communication and presentation skills (i.e., ability to present ideas effectively in formal and informal situations in group and individual settings).
• Strong planning,organizational, and time management skills (i.e., ability to effectively plan, organize, and prioritize work, and to control and follow up to ensure work completion).
• Demonstrated initiative (i.e. initiate appropriate action without being directed) and ability to work independently

MUST BE A US CITIZEN

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.

COMMITMENT TO DIVERSITY

KaylaTek is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

E-VERIFY AND BACKGROUND CHECKS

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. KaylaTek participates in the DHS e-Verify program. KaylaTek also conducts a background check on all candidates post offer though PROScreening LLC.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form (I-9) upon hire. KaylaTek participates in the DHS e-Verify program. KaylaTek also conducts background checks (criminal, education, prior employment and professional certifications/licensing) on all candidates post offer though PROScreening LLC.

The Air Force National Capital Regional (AFNCR) IT Services Contract also requires pre-employment drug testing and annual drug testing for all hires to work on contract with the Air Force. This is at no cost the candidate/employee