Information Systems Security Officer - TS/SCI with Polygraph Required!

Frontier Technologies LLC; Hanover (MD); On-site; USD 100,000 - 130,000; Full time

Job summary

Frontier Technologies LLC is seeking an Information Systems Security Officer with a strong focus on network security and risk management. The ideal candidate will have significant experience in security engineering and possess relevant certifications including CISSP or CASP.

This role involves identifying security risks, developing and implementing security policies, and providing guidance to junior staff. The position is based in Hanover, Maryland, requiring a full-time commitment and offering opportunities for professional growth.

Qualifications

• Active TS/SCI with full scope polygraph required.
• 6+ years experience in a Security Engineering role.
• Experience with various operating system environments.

Responsibilities

• Identifies security risks and vulnerabilities for networks and systems.
• Develops and operates firewalls and intrusion detection systems.
• Provides leadership and guidance to less experienced personnel.

Skills

Security analysis

Risk management

Troubleshooting

Analytical skills

Good communication

Education

Bachelor's degree in Computer Science or related field

Tools

NMAP

Nessus

Firewalls

Intrusion Detection Systems

Job description

Information Systems Security Officer – TS/SCI with Polygraph Required

Full-time

Essential Job Functions

• Identifies security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives.
• Develops, tests and operates firewalls, intrusion detection systems, enterprise anti‑virus systems and software deployment tools.
• Provides complex engineering analysis and support for firewalls, routers, networks and operating systems.
• Performs and evaluates vulnerability scans within a multi‑platform, large enterprise environment.
• Reacts to and initiates corrective action regarding security violations, attempts to gain unauthorized access, virus infections that may affect the network or other event affecting security.
• Oversees user access process to ensure operational integrity of the system, enforces the information security configuration and maintains system for issuing, protecting, changing and revoking passwords.
• Develops technical and programmatic assessments, evaluates engineering and integration initiatives and provides technical support to assess security policies, standards and guidelines.
• Builds and implements security policies and plans for data, software applications, hardware and telecommunications.
• Performs complex product evaluations, recommends and implements products/services for network security.
• Validates and tests complex security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.
• Reviews, recommends and oversees the installation, modification or replacement of hardware or software components and any configuration change that affects security.
• Provides complex technical oversight and enforcement of security directives, orders, standards, plans and procedures at server sites.
• Ensures system support personnel receive and maintain security awareness and training.
• Assesses the impact on the business unit/customer caused by theft, destruction, alteration or denial of access to information and reports to senior management.
• Provides leadership and work guidance to less experienced personnel.

Contract Qualifications

• Active CISSP or CASP to meet DoD 8570 IASAE I role certification requirement.
• Active TS/SCI with full scope polygraph required.
• Active Certified Ethical Hacker (CEH) to meet DoD 8570 CNDSP Infrastructure Support role and CNDSP Analyst role certification requirement.
• Minimum of 6 years experience in a Security Engineering role.
• Minimum of 3 years within the IC or DoD.
• Experience with security analysis tools. Security systems administration is a plus.
• Experience with NMAP and Nessus.
• Familiarity with the directives and requirements outlined in the ICD 503, NIST, and CNSS policies and guidance that govern the deployment and monitoring of secure information systems and networks.
• Experience with configuring and maintaining secure configurations for Linux and Microsoft operating systems.
• Substantive knowledge and understanding of working with and securing network topologies, VPNs, encryption, CentOS, web technologies, Java‑based web applications, virtualization technologies such as OpenStack, PKI‑based authentication, and integration with authorization systems.
• Experience reviewing and analyzing operational and security documentation and configurations to assess and validate operational security controls are maintained. The candidate should be process oriented and have good verbal and writing communication skills and good interpersonal skills.
• Must be able to work equally as well in a team environment and individually.
• Must have good customer relations skills and be flexible in a fast‑paced changing environment.

Basic Qualifications

• Bachelor's degree or equivalent combination of education and experience.
• Bachelor's degree in computer science or related field preferred.
• Seven or more years of experience in network, host, data and/or application security in multiple operating system environments.
• Experience working with IP networking, networking protocols and understanding of security related technologies including encryption, IPsec, PKI, VPNs, firewalls, proxy services, DNS, electronic mail and access‑lists.
• Experience working with internet, web, application and network security techniques.
• Experience working with relevant operating system security (Windows, Solaris, Linux, etc.).
• Experience working with leading firewall, network scanning and intrusion detection products and authentication technologies.
• Experience working with federal regulations related to information security (FISMA, Computer Security Act, etc.).
• Experience working with NIST Special Publications and C & A process methodology.
• Possess security certifications (CISSP, CCNA, etc.) and/or top secret security clearance.

Other Qualifications

• Good communication skills.
• Strong analytical and problem‑solving skills to troubleshoot and resolve network/operating system security issues.
• Ability to perform and interpret vulnerability assessments.
• Ability to administer the operations of a security infrastructure.
• Ability to balance and prioritize work.

Other Desired Qualifications

• Experience with configuring and maintaining secure configurations for Linux or Microsoft operating systems.
• Experience in government or commercial cloud systems and elastic compute.
• Understanding of Risk Management Framework according to ICD 503, CNNSI 1253 and NIST SP 800.
• Knowledge and understanding of working with and securing routers, switches, firewalls, VPNs, VLANs, IDS, Windows systems.

EEO Statement

All your information will be kept confidential according to EEO guidelines.