Information Systems Security Engineer (ISSE) Level 5

LV8D Solutions, LLC; Chantilly, Northern (VA, KY); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive salary

Collaborative work environment

Professional development opportunities

Job summary

A technology solutions provider is seeking a Senior Information Systems Security Engineer (ISSE) Level 5 in Chantilly, Virginia, to provide critical cybersecurity engineering support to government customers. The role requires extensive experience in systems engineering and security frameworks, along with strong communication and leadership skills. You will work in a dynamic environment, collaborating with cross-functional teams and ensuring compliance with cybersecurity policies and best practices. Ideal candidates will have significant relevant experience and relevant technical certifications.

Qualifications

• High School degree with 19+ years of relevant experience.
• Experience with RFPs, RFCs, and ECPs required.
• Ability to convey technical information to non-technical personnel.

Responsibilities

• Provide cybersecurity engineering support for various systems.
• Collaborate with various internal and external stakeholders.
• Evaluate enterprise-level designs and recommend solutions.

Skills

Technical communication

Leadership

Problem-solving

Team collaboration

Cybersecurity principles

Education

Bachelor's degree or equivalent experience

Master's degree preferred

Tools

Cloud computing

Network security measures

Job description

Information Systems Security Engineer (ISSE) Level 5

LV8D Solutions is seeking a Senior Information Systems Security Engineer (ISSE) Level 5 to provide Systems Engineering And Technical Advisory (SETA) services to our Government customer in a dynamic System Program Office (SPO) at the National Reconnaissance Office (NRO). This position supports cybersecurity engineering activities, such as technical support and guidance on policy, architecture, design, development, integration, implementation, and decommissioning of systems and system components, for space and ground systems for multiple satellite systems, that are currently in development and on orbit. It provides subject matter expertise to an evolving mission capability and requires close collaboration with developers, Information Systems Owners (ISOs), Information Systems Security Managers (ISSMs), Associate Chief Information Officer (ACIO), Security Control Assessors (SCAs), Designated Authoring Officials (DAOs), and other Intelligence Community (IC) agency’s cybersecurity engineers.

The position requires the ability to learn about technology quickly, communicate technical information to non-technical audiences, and work tactfully and collaboratively with a variety of internal and external stakeholders to meet mission outcomes. Interested candidates need to thrive in an innovative, fast-paced environment; are highly motivated and not afraid to take on uncharted territory; possess strong communication, leadership, and organizational skills; and be able to prioritize their time to be effective in a dynamic environment.

Qualifications

Education/Experience

• High School degree and 19+ years of relevant experience,
• Associate’s degree and 17+ years of relevant experience,
• Bachelor’s degree and 15+ years of relevant experience, or
• Master’s degree and 12+ years of relevant experience

Certification

• DoD 8570.01-M: Information Assurance Management (IAM) Level III
• Preferred certification: Certified Information Systems Secuirty Professional (CISSP)

Clearance

• TS/SCI with CI Polygraph

Requirements/Abilities

• Experience with Request For Proposals (RFPs), Request For Changes (RFCs), Engineering Change Proposals (ECPs), Interface Control Documents (ICDs), and milestone reviews processes to include documentation creation and review
• Experience with the acquisition process to include proposal and milestone reviews
• Experience with space and ground mission systems and processes to include tasking, collection, communications, command and control, mission data processing and data delivery
• Experience providing support to program and technical review meetings and making recommendations on future courses of action
• Ability to understand technical information and convey in terms that are applicable and understandable to technical and non-technical personnel
• Evaluate enterprise-level designs and program integration solutions and provide recommendations
• Attend Enterprise, System, Subsystem, and Segment level design reviews and provide recommendations
• Perform independent reviews of contractor designs to verify satisfaction of mission needs (Requirements, CONOPs, constraints, etc.)
• Review test plans and procedures and verification and validation plans for completeness and accuracy
• Coorindate CNSSP 12 complaince with NSA; mediate policy against systems design (defend trade off between risk, cost, and schedule to accomplish mission purpose)
• Provide cybersecurity concept, policy, requirements, design, development, implementation, and/or integration, from end-to-end, of a system or system component as required
• Recommend cybersecurity architecture, when required, that promotes cost-effective and efficient systems solutions consistent with progam objectives and measures of performance
• Design, develop, and implement network security measures that provide confidentiality, integrity, and availability, authenitication, and non-repudiation
• Analyze system environment and provide technical evaluations in identifying IA-related vulnerabilities, threats, and risks
• Coordinate program remediation plans for addressing vulnerability findings as directed by Government lead
• Recommend reciprocity risk management principles that standardize security assessments where possible
• Identify and apply the appropriate level of recommended remediation to secure anomalies or integrity loopholes such as system weaknesses or vulnerabilities
• Ensure rigorous application of cybersecurity control implementation, principles, and practices in the delivery of agency IT systems guided by IC or DoD security policies
• Evaluate engineering change request proposals that require additional system requirements and/or possible change to system architecture and provide updated security impacts that affect the system
• Provide expertise on RMF authorization process where needed
• Develop security plans utilizing cybersecurity controls where possible when assessing a system for authorization
• Collaborate and work with other SMEs on developing authorization packages in support of achieving Authority To Operate (ATO) within required timelines
• Assess and guide where needed the implementation of identified corrections associated with techinal vulnerabilities
• Provide guideance and direction on the maintenance of security configuration control of hardware, systems, and application software where needed
• Integrate and/or impment Cross Domain Solutions (CDS) ino network solutions as needed,
• Collaborate with appropriate Cross Domain Services representatives to ensure proper authorization and alighment with agency processes
• Provide technical review, guidance, recommendation, and repsonses on directorate tasking’s, in the agency task management systems, as needed by the Government
• Participate in cybersecurity working groups, Integrated Product Teams (IPTs), and provide cybersecurity guidance as needed at those meetings
• Communicate and collaborate effectively with program leads and Technical SMEs in support of acquisition program milestones or projects that require extensive collaboration over long periods of time
• Participate ad provide support for Program Reviews and acquisition as needed by Government program lead
• Maintain and report operational security posture for information systems
• Perform risk assessment analysis to support Assessment and Authorization (A&A)
• Prepare and review A&A documentation in accordance with ICD 503
• Support industry partners with their A&A efforts
• Prepare system documentation for assessments in accordance with the Risk Management Framework (RMF) process
• Identify security deficiencies and provide recommendations for mitigations
• Track and report Plan of Action and Milestones (POA&M) through mitigation and risk acceptance
• Create security policies and maintain existing information system security documentation,
• Conduct periodic and continuous reviews of the system to ensure compliance with the authorization package
• Continuously review/evaluate best practices for implementing a comprehensive audit program
• Implement vulnerability management programs to track and address IAVAs and security patches, access applicability to existing systems, and ensure remediation closure
• Experience with network and information system security principles
• Experience with cloud computing
• Experience with security-related IC and DoD policies, procedures and operating instructions
• Ability to build rapport with military, civilian, and contractor personnel at all levels
• Ability to work independently, as a team member, and as a team leader
• Excellent written and oral communication skills
• Excellent problem-solving skills

Geographic Locations

Chantilly, Virginia