Information Systems Security Engineer (Senior) - TS required to apply; Washington DC

Bow Wave LLC; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

Bow Wave LLC in Washington, DC seeks an experienced information security professional to lead secure design, analysis and testing of information systems, ensuring compliance and audit readiness. You will maintain comprehensive security documentation and develop robust test plans to detect and mitigate risks.

With at least eight years in information security, you will evaluate findings, implement remediation, and advise on defining system boundaries and strengthening security controls across

Qualifications

• Minimum eight (8) years of experience in information security roles.
• Secure design, analysis and testing of information security systems and products.
• Maintain up-to-date security documentation including system security plans, business impact analyses, continuity plans, mitigations, allowed/software lists, elevated user access, and roles.
• Create/update security test plans and perform tests to satisfy audits.
• Evaluate, validate and implement solutions to mitigate information systems findings or risks.
• Apply methods/standards to ensure baseline security safeguards are implemented and documented.
• Advise on security activities such as establishing system boundaries and assessing weaknesses.

Responsibilities

• Secure design, analysis and test of information security systems and products.
• Keep system security plans and related documentation current.
• Create and update security test plans for audits and risk mitigation.
• Evaluate and implement solutions to mitigate findings and risks.
• Ensure baseline safeguards are implemented and documented.
• Advise on system boundaries and assess weaknesses across the environment.

Skills

Information security

Risk assessment

Security testing

Documentation

Auditing

Job description

Minimum eight (8) years experience

• Responsible for the secure design, analysis, and test of information security systems and products.
• Ensure technical documentation exists for all systems and is kept up to date to include system security plans, business impact analyses, continuity of operations plans, mitigations, authorized software lists, authorized hardware lists, and elevated user access list and roles.
• Create and update security test plans for detecting and mitigating risk to information systems. engineer and perform tests and test plans to satisfy audits.
• Evaluate, validate and implement solutions for mitigating information systems findings or risks.
• Apply methods, standards and approaches for ensuring the baseline security safeguards are appropriately implemented and documented.
• Advise on a range of security related activities such as establishing system boundaries, assessing the severity of system weaknesses