Information Systems Security Engineer (ISSE) with Security Clearance

VTG; Chantilly (VA); On-site; USD 145,000 - 180,000; Full time

Job summary

VTG is seeking an Information Systems Security Engineer (ISSE) in Chantilly, VA to design and implement cybersecurity controls and supporting documentation. The role involves vulnerability assessments, remediation support, and collaboration with ISSMs, admins, and developers across network, cloud, virtualization, and enclave environments.

The ideal candidate has ISSE experience on technical programs, a Bachelor's degree with 8 years' experience, and a TS/SCI with polygraph.

Qualifications

• Requires ISSE experience on technical communication or intelligence collection programs.
• Requires a Bachelor's degree plus 8 years of relevant experience and a TS/SCI with polygraph.
• Experience designing, implementing and auditing security controls and IA programs.

Responsibilities

• Design and embed security controls into system architectures.
• Run routine vulnerability scans and coordinate patching with admins and developers.
• Review and complete A&A documentation and related SOPs.
• Develop and integrate IA/security systems for network, cloud, virtualization, and enclaves.
• Perform security assessments to identify non-compliance and mitigation options.
• Ensure proper baselines and configuration management across projects.

Skills

Cybersecurity

Vulnerability assessment

IA/Info Assurance

Network security

Systems architecture

A&A documentation

Education

Bachelor's degree + 8 years experience

Tools

COTS/GOTS tools

Security scanning tools

Documentation tools

Job description

Responsibilities Overview VTG is looking for a Information Systems Security Engineer (ISSE) in Chantilly, VA What will you do? The Information Systems Security Engineer (ISSE) will design and implement cybersecurity controls, conduct vulnerability assessments and system scans, support remediation efforts, and maintain required A&A documentation. The ISSE will work with ISSMs, system administrators, and developers to ensure systems remain secure, compliant, and properly configured across network, cloud, virtualization, and enclave environments. Do you have what it takes? ROLES AND RESPONSIBILITIES:

Responsibilities Overview VTG is looking for a Information Systems Security Engineer (ISSE) in Chantilly, VA What will you do? The Information Systems Security Engineer (ISSE) will design and implement cybersecurity controls, conduct vulnerability assessments and system scans, support remediation efforts, and maintain required A&A documentation. The ISSE will work with ISSMs, system administrators, and developers to ensure systems remain secure, compliant, and properly configured across network, cloud, virtualization, and enclave environments. Do you have what it takes? ROLES AND RESPONSIBILITIES:

Tasks shall include, but are not limited to, the following:

• Technical cybersecurity role responsible for designing and embedding security controls into system architectures
• Ensure scans for all systems are run on a routine basis and work with system administrators/developers to patch vulnerabilities and policy failures
• A&A -review and complete required technical documentation (Accounts Management Plan, SOPs, etc.)
• Understanding of computer architecture, networking, operating systems, and network security
• Work with ISSMs to resolve any issues
• Develop, implement, and/or integrate Information Assurance (IA) and security systems, including those for networking, computing, virtualization, cloud, and enclave environments, to include those with multiple enclaves and with differing data protection/classification requirements.
• Review and conduct technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies.
• Create and review Assessment and Authorization (A&A) Body of Evidence documentation and provide feedback on completeness and compliance of its content.
• Advise and assist the Sponsor's customers with the Lifecycle Assessment and Authorization process.
• Ensure all program activities maintain system baselines and configuration management items, including security event monitoring policies, in a manner determined and agreed to by the COTR and the Sponsor's management.
• Ensure changes are made using the Sponsor's approved cybersecurity approval process and are coordinated and scheduled.
• Maintain appropriate levels of documentation deemed acceptable by Agency regulations and guidelines for each individual project, including operations and maintenance information, operations guides, design documents, scans, and overall concepts of operations.
• Enforce the design and implementation of trusted interfaces among external systems and architectures.
• Utilize COTS/GOTS and custom tools in order to scan, identify, contain, mitigate and remediate vulnerabilities and intrusions.
• Protect information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording and destruction.
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information.

REQUIRED EDUCATION & EXPERIENCE:

• Prior ISSE and Network Engineering experience working on a technical communication or intelligence collection program.
• Bachelor's degree + 8 years of experience
• TS/SCI with polygraph

VTG's estimated starting pay range is $145,000-$180,000 annually, which is a general guideline for the geographic location. When extending an offer, VTG also considers work experience, education, skill level, market considerations and may possibly include contractual requirements which may cause an offer to fall outside of this range.