Information Systems Security Engineer with Security Clearance

Cornerstone Defense; Herndon (VA); On-site; USD 140,000 - 180,000; Full time

Job summary

Cornerstone Defense is seeking an Information Systems Security Engineer (ISSE) in Herndon, VA to implement RMF/ICD 503 controls and develop SSPs for A&A reviews. The candidate will manage POA&M artifacts and coordinate with customer security teams to obtain Authority to Operate on complex government-embedded networks.

Required is active TS/SCI w/ Polygraph, 11+ years of experience, and proficiency with tools like Nessus, Rapid7, Splunk, and Xacta.

Qualifications

• Experience implementing RMF/ICD 503 security controls.
• Ability to develop System Security Plans (SSP) for A&A reviews.
• Experience creating and tracking POA&M.
• Coordinate with customer security teams to obtain Authority to Operate (ATO).
• Familiarity with security tools and processes (Splunk, Nessus, WebInspect).
• Proficiency in cloud security concepts (AWS/Azure).
• Background in cyber system engineering including identity management and access control.

Responsibilities

• Implement and validate RMF/ICD 503 security controls.
• Develop SSPs to support Accreditation and Authorization reviews.
• Create and manage POA&M artifacts and remediation plans.
• Coordinate with customer security teams to achieve ATO.
• Assist with cyber security engineering across systems and networks.

Skills

RMF/ICD 503 security controls

SSP development

POA&M management

ATO coordination

Security tools

Python

Linux

Education

Bachelor's degree in a related field

Tools

Nessus

Rapid7

Xacta

Splunk

WebInspect

Job description

Title: Information Systems Security Engineer Location: Herndon, VA

• Clearance:
• Active TS/SCI w/ Polygraph needed to apply
• Company Overview: Cornerstone Defense, in partnership with our military, intelligence, and civil government customers, supports U.S. operations worldwide through the use of many different types of intelligence, satellite, and cyber technologies. Cornerstone's Intelligence Sector provides solutions to the United States Government for information collection, operations, exploitation and dissemination, and research activities. Our Team specializes in software development, cloud architecture, systems and network engineering, systems integration, agile management, as well as targeting operations and intelligence analysis. Our support to our mission customers includes cyber network operations, exploitation and defense, signals intelligence, human intelligence, and critical missions and networks.
• Required Education, Experience, & Skills: We are actively seeking an Information Systems Security Engineer (ISSE) with a minimum of 11 years experience with a Bachelors Degree. Other degrees will be considered with the years experience adjusted to accommodate. We are looking for a candidate with specific skills that may include the following:
• Implementation and validation of security controls that support the Risk Management Framework (RMF) and ICD 503 Security Accreditation
• Developing architecture documentation and Systems Security Plans (SSP) to support Accreditation and Authorization (A&A) reviews
• POA&M development and implementation
• Coordinating with customer security organizations to achieve Authority to Operate (ATO).
• Knowledge of the complex environment involving shared networks and multiple security enclaves
• Engineering for Cyber engineering and integration services including security, authentication, identity management, authorization, and access control engineering.
• Self-starter able to work independently and build relationships with technical reps across divisions, comfortable with cyber security and able to brief issues to the customer
• Over 5 years of experience working on Government Agency enterprise infrastructure and engineering programs. Preferred Education, Experience, & Skills:
• Nessus / Rapid7
• Security Development and Operations (SecDevOps)
• Various security tools and processes such as Splunk, Nessus Security Center, WebInspect, Xacta
• Cloud security controls and implementation
• STIG compliance and vulnerability management
• CISSP
• AWS Certified Security Specialty
• Microsoft Office365
• Experience in one or more software products associated with cyber system engineering for data analytics including SQL security, TANIUM Endpoint Management Software, PowerShell, MacAfee, App Blocker, Splunk ITSI.
• Experience with one or more software development environments supporting commercial or open-source tools including but not limited to: Linux, Python, C, Bash Scripting, Perl, SQL, Splunk Phantom, UBA, and UIPath
• Experience in one or more cloud computing services and technologies including but not limited to: AWS/C2S, Microsoft Azure, Nutanix, VMware.