Information Systems Security Engineer, Mid / Senior

SITEC Consulting; Hanover (MD); On-site; USD 90,000 - 130,000; Full time

Job summary

A leading technology consulting firm seeks an Information Systems Security Engineer to join their team in Maryland. This role involves performing technical security assessments, designing security architectures, and ensuring compliance with established security standards. Candidates must possess a valid TS/SCI clearance, a relevant degree, and CISSP certification, contributing to innovative cybersecurity solutions. Exceptional benefits and a collaborative environment await you as you advance your career.

Benefits

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

Paid Time Off

Qualifications

• TS/SCI with Poly at time of application.
• 14 years of ISSE experience for Level 2, 20 years for Level 3.
• Strong background in crypto and network security.

Responsibilities

• Conduct technical security assessments and recommend mitigation strategies.
• Support security planning, assessment, risk analysis, and compliance.
• Design and integrate security architectures across multiple environments.

Skills

Network Security

Information Assurance

Security Assessments

Cloud Computing

Risk Management

Education

Bachelor's degree in Computer Science or related discipline

CISSP Certification

DoD 8570.01-M compliance

Job description

About SITEC

SITEC is an employee and customer focused Information Technology and Professional Services Firm specializing in design, development, and delivery of state-of-the-art technology solutions, as well as cybersecurity, software and systems engineering services. SITEC provides support services as required for continuous operation of the Software Support Activity Software Production Facilities including complete lifecycle services for our customers platforms.

The pay for this position is competitive and commensurate with experience. Embrace this opportunity to showcase your expertise and contribute to our innovative projects. You will be given the opportunity to utilize great benefits such as Medical, Dental, Vision, 401(k), Life Insurance, Health Savings Account, Flexible Spending Account, Competitive Salary, and Paid Time Off. Are you ready to take the next step in your career with us? Apply now!

WHAT DOES AN INFORMATION SYSTEMS SECURITY ENGINEER DO?

Augment a well-established team as an Information Systems Security Engineer. This is a collaborative team environment that entails frequent interaction with customers. This is a fast-paced team so a willingness to take on challenges to creatively solve customer requirement problems will be required. The successful candidate for Information Systems Security Engineer will be self-motivated and will support new development work as well as sustainment activities.

Embrace the opportunity to showcase your Information Systems Security Engineer expertise and contribute to impactful projects with a forward-thinking team!

WOULD YOU BE A GREAT INFORMATION SYSTEMS SECURITY ENGINEER?

(ISSE) will perform and review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies. The successful candidate will validate and verify system security requirements definitions and analysis and establishes system security designs. Designs, develops, implements and/or integrates IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements. Builds IA into systems deployed to operational environments. Assists architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Agency security policy and enterprise solutions.

In addition, the ISSE will support the building of security architectures while enforcing the design and implementation of trusted relations among external systems and architectures. Assesses and mitigates system security threats/risks throughout the program life cycle. Contributes to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations. Reviews certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content. Applies system security engineering expertise in one or more of the following to : system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification; authentication; and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing. Support security authorization activities in compliance with Agency/CSS Information System Certification and Accreditation Process (NISCAP) and DoD Risk Management Framework (RMF), the NIST Risk Management Framework (RMF) process, and prescribed Agency/CSS business processes for security engineering.

Requirements

• TS/SCI with Poly at time of application
• Bachelor's degree in Computer Science, Information Assurance, Information. Security System Engineering, or related discipline from an accredited college or university is required. Four (4) years of ISSE experience may be substituted for a bachelor's degree.
• LEVEL 2 ISSE: Fourteen (14) years' experience as an ISSE on programs and contracts of similar scope, type, and complexity is required.
• LEVEL 3 ISSE: Twenty (20) years' experience as an ISSE on programs and contracts of similar scope, and complexity is required.
• Experience manually reviewing network diagrams, network device configurations, termination points for VPNs and working knowledge of software TLS security.
• Maintain flexible and non-traditional Risk Management Framework (RMF) review of unclassified/classified networks to assess and prescribe countermeasures for secure communications.
• Familiar with applying different security standards and frameworks. Ability to create security assessment reports, adhoc technical/administrative tasks, keen writing skills and leadership qualities.
• Strong crypto, network and cloud computing background.
• Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments
• Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of IA architectures, systems, or system components
• Participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of secure networking, computing, and enclave environments
• Apply knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments
• Interact with the customer and other project team members
• Participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of IA architectures, systems, or system components
• Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures
• Support security planning, assessment, risk analysis, and risk management
• Identify overall security requirements for the proper handling of Government data
• Provide security planning, assessment, risk analysis, and risk management
• Perform system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements
• Recommend system-level solutions to resolve security requirements
• Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures

Certifications

• DoD 8570.01-M compliance with IASAE Level 2 is required
• CISSP Certification is required.

Join our team today!

We believe in taking care of our team, both on and off the job. That's why we offer a mobile-friendly application process - because we know your time is valuable. If you're ready to take your skills to the next level and join a team that values hard work and good times, complete our application today!