Information Systems Security Engineer (ISSE) - TS/SCI Poly required

Emtakllc; Maryland; On-site; USD 140,000 - 200,000; Full time

Job summary

Emtakllc seeks an experienced Information Systems Security Engineer (ISSE) to support a high-priority IC/DoD mission in Annapolis Junction, MD. The ISSE will perform hands-on security engineering and assessment across complex computing, networking, and enclave environments.

The role requires TS/SCI poly and DoD RMF/NIST RMF experience, with 12 years of ISSE work and a relevant bachelor’s degree. Four extra years can substitute for the degree, and DoD 8570 Level 2 compliance is required.

Qualifications

• 12 years of ISSE experience in programs of similar scope and complexity.
• Recent experience (within last 5 years) applying cybersecurity principles and technologies (access control, authorization, identification/authentication, PKI, network security).
• Bachelor’s degree in a related discipline from an accredited college or university.
• DoD 8570 / IASAE Level 2 compliance required.
• Four additional years of ISSE experience may substitute for the bachelor’s degree.

Responsibilities

• Perform/review technical security assessments of computing and network environments to identify vulnerabilities and non-compliance with IA/security standards.
• Develop mitigation strategies and support resolution of identified security risks.
• Validate and verify system security requirements and contribute to system security architecture and design.
• Design, develop, implement, and integrate information assurance and cybersecurity solutions across computing, networking, and enclave environments.
• Build security controls and IA requirements into systems throughout the engineering and deployment lifecycle.
• Work with architects and system developers to implement security functionality per agency policies and enterprise security solutions.
• Support security architectures and trusted relationships between external systems.
• Assess and mitigate cybersecurity threats and risks throughout the system/program lifecycle.
• Support security planning, assessment, risk analysis, risk management, authorization, certification, and security awareness activities.
• Review security authorization and certification documentation for completeness, accuracy, and compliance.
• Apply security engineering across disciplines including architecture, identity/authentication/authorization, PKI, cross-domain, network, and testing.
• Support security authorization activities per NSA/CSS NISCAP, DoD RMF, NIST RMF.

Skills

ISSE experience

Security principles

Network security

PKI

RMF

Education

Bachelor’s degree in Computer Science / Information Assurance / Information Security / Systems Engineering

Tools

DoD 8570 / IASAE Level 2

Job description

Information Systems Security Engineer (ISSE) - TS/SCI Poly required

• Annapolis Junction, MD
• Computer/Software

Information Systems Security Engineer (ISSE)

We are seeking an experienced Information Systems Security Engineer (ISSE) to support a high-priority Intelligence Community / DoD mission. The ISSE will provide hands-on security engineering and assessment support across complex computing, networking, and enclave environments.

Responsibilities

• Perform and/or review technical security assessments of computing and network environments to identify vulnerabilities, security gaps, and non-compliance with applicable IA/security standards and regulations.
• Develop mitigation strategies and support the resolution of identified security risks.
• Validate and verify system security requirements and contribute to system security architecture and design.
• Design, develop, implement, and integrate information assurance and cybersecurity solutions across computing, networking, and enclave environments, including multi-enclave environments with differing data protection and classification requirements.
• Build security controls and IA requirements into systems throughout the engineering and deployment lifecycle.
• Work with architects and system developers to identify and implement appropriate security functionality consistent with agency security policies and enterprise security solutions.
• Support the development and implementation of security architectures and trusted relationships between external systems and architectures.
• Assess and mitigate cybersecurity threats and risks throughout the system/program lifecycle.
• Support security planning, assessment, risk analysis, risk management, authorization, certification, and security awareness activities.
• Review security authorization and certification documentation for completeness, accuracy, and compliance.
• Apply security engineering expertise across areas including:
  • Security architecture and engineering lifecycle
  • Identity, authentication, authorization, and access control
  • PKI and cryptographic solutions
  • Cross-domain solutions
  • Network and enterprise security
  • System integration and security testing
  • Risk management and vulnerability mitigation
  • Intrusion detection and incident handling
  • Configuration and change management
  • Auditing and security assessmentsli>
  • Contingency planning
  • Security authorization / certification
• Support security authorization activities in accordance with NSA/CSS NISCAP, DoD RMF, NIST RMF, and applicable NSA/CSS security engineering processes.

Required Qualifications

• 12 years of ISSE experience supporting programs and contracts of similar scope, type, and complexity.
• Recent experience within the last 5 years applying cybersecurity principles and technologies, including:
  • Access control
  • Authorization
  • Identification and authentication
  • PKI
  • Network security
  • Enterprise security architecture
• Bachelor’s degree in Computer Science, Information Assurance, Information Security, Systems Engineering, or a related discipline from an accredited college or university.
• DoD 8570 / IASAE Level 2 compliance required.
• Four additional years of ISSE experience may substitute for the bachelor’s degree.