ISSE

UICGS / Bowhead Family of Companies; Corona (CA); On-site; USD 95,000 - 120,000; Full time

Job summary

Bowhead seeks an ISSE to join the NSWC Corona program in Norco, CA. The role requires understanding and documenting system designs with multiple enclaves and varying data protection requirements, and knowledge of distributed/cloud-based big data applications.

Onsite-only position. Responsibilities include RMF accreditation, risk assessment of open source and COTS/GOTS components, and collaboration across diverse audiences to ensure security posture.

Qualifications

• 9+ years of ISSE experience on large multi-tier programs or 7+ years with a Master’s in a related field.
• Experience implementing DoD system accreditation processes (DIACAP acceptable and RMF preferred).
• Working knowledge of TCP/IP suite, computer architectures, and network topologies.
• Experience with DISA STIGs/SRGs, vulnerability management, and automated security scanning results.

Responsibilities

• Create, review and edit authorization documentation per federal and DoD policy.
• Understand and implement DoD RMF system accreditation processes.
• Assess risk of open source and COTS/GOTS components; manage system risk.
• Use vulnerability management systems and accreditation records; enforce defensible processes.
• Support security planning, risk analysis, and risk management for the system.
• Recommend system-level security solutions and guide development to meet posture requirements.
• Assist Government in enforcing trusted relationships across external systems and architectures.
• Apply IA policy to design and implement secure networking and enclave environments.

Skills

ISSE experience

RMF accreditation

DIACAP experience

DoD security

Vulnerability management

TCP/IP knowledge

Education

Bachelor's degree

Master's degree

High School Diploma

Job description

Bowhead seeks an ISSE to join our team supporting the Program Office for NSWC Corona in Norco, California. Candidate will be required to understand and document systems design and implementation that encompass multiple enclaves, to include those with differing data protection/classification requirements. The candidate should understand distributed architecture and cloud-based systems for big data applications.

This position is 100% onsite.

Responsibilities

• Create, review and edit authorization documentation for completeness and accuracy in accordance with federal and DoD policy.
• Thoroughly understand and be able to implement DoD RMF system accreditation processes.
• Assess use case and operational risk of integrated open source, and GOTS/COTS software components.
• Will use vulnerability management systems, automated security scanning tools, and system accreditation record systems.
• Must be able to grasp new concepts, facilitate information exchanges for data gathering, and collaborate with diverse audiences.
• Will follow established processes where applicable and establish and execute defensible processes where none are prescribed.
• Provide security planning, assessment, risk analysis, and risk management support.
• Recommend system-level solutions to resolve security requirements and guide the development team in meeting the security posture requirements.
• Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
• Must apply existing knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments.
• Must be able to interact well with others to complete work.
• Other duties as assigned.

Qualifications

• 9+ years of experience as an ISSE with large multi-tiered programs and Bachelors in related field; OR 7 years relevant experience with Masters in related field; OR High School Diploma or equivalent and 13 years relevant experience.
• Experience implementing DoD system accreditation processes (DIACAP acceptable and RMF preferred).
• A working knowledge of TCP/IP suite of protocols and services, computer architectures, and network topologies is required.
• Experience with DISA STIGs and SRGs, vulnerability management systems, mitigation and compliance processes, and reviewing results from automated security scanning tools.

SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the minimum Secret level.

Physical Demands:

• Must be able to lift up to 25 pounds
• Must be able to stand and walk for prolonged amounts of time
• Must be able to twist, bend and squat periodically

Targeted salary range is $95,000 to $120,000 annually based on qualifications and experience.

Please note that the salary information is a general guideline only. Bowhead considers factors such as (but not limited to) scope and responsibilities of the position, candidate’s work experience, education/training, key skills, internal peer equity, as well as, market and business considerations when extending an offer.