Senior Information Systems Security Engineer

KEMTechnology; Arlington (VA); On-site; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a skilled Information Systems Security Engineer (ISSE) to enhance their information security efforts. In this pivotal role, you will safeguard networks, manage security systems, and conduct risk analyses to protect sensitive data. You will collaborate with a dynamic team to implement security controls, facilitate technical insertions, and ensure compliance with federal requirements. If you possess a strong background in IT security, cloud security experience, and a passion for protecting critical information, this opportunity is perfect for you. Join a forward-thinking organization where your expertise will make a significant impact!

Qualifications

• Active TS/SCI Security Clearance is required.
• Experience with technical cloud security work is essential.
• Familiarity with programming languages for security tasks.

Responsibilities

• Support in safeguarding networks against unauthorized access.
• Conduct risk analyses and manage information security systems.
• Implement and enforce security policies and plans.

Skills

Information Assurance

IT Security

Cloud Security

Risk Analysis

Infrastructure as Code (IaC)

Programming Languages (C++, C#, Java, Python, Perl, Ruby, Visual Basic)

Technical Security Controls

Vulnerability Management

Education

Bachelor’s Degree in related field

7 years of related experience

10 total years of experience in Information Assurance and IT Security

Tools

Terraform

AWS CloudFormation

JSON

YAML

HCL

Job description

Position Summary:

The ISSE supports the Information systems security officer (ISSO) in managing all aspects of an organization's information security system, including researching, testing, training and implementing programs designed to safeguard sensitive information from any possible breaches.

Role Responsibilities:

As an information systems security engineer (ISSE),you will support the customer in safeguarding networks against unauthorized modification, destruction, or disclosure. Activities include but are not limited to:

• Conducting risk analysis on products reviewing CVEs, plugins, CWEs etc
• Understanding how to explain and remediate the technical security controls
• Facilitating Technical Insertions (the introduction of any new and/or improved hardware or software capabilities into an established operational system) for new products
• Reviewing change requests for security impacts and technical documentation from a security perspective
• Participates in Agile Planning Events to provide technical input
• Providing technical input into trade studies for tools
• Providing technical expertise in implementation of technical security controls in government cloud environments (cloud security experience is highly desired)
• Researching, evaluating, testing, recommending, communicating, and implementing new security software or devices

• Implementing, enforcing, communicating internet, network, or other information security policies or security plans for data, internet, software applications, hardware, telecommunications, and computer installations
• Managing all aspects of an organization's information security system, including researching, testing, training and implementing programs designed to safeguard sensitive information from any possible breaches

The ISSE will support the ISSO in the following activities (including but not limited to):

• Conducting risk analyses from vulnerability, compliance scans, pen testing results, or other audit activity; writes including but not limited to Plan of Action and Milestones, System Security Plans, Security Control Traceability Matrices, Configuration Management Plans, Contingency Plans and Test Results, Business Impact Analyses, and Security Impact Analyses
• Submitting monthly scan data in support of FISMA scorecard compliance requirements
• Responding to data calls, scan requests and weekly and monthly reporting requirement

Required Education, Experience, Qualifications, & Skills:

• An active TS/SCI Security Clearance
• Bachelor’s Degree with 7 years related experience
  OR
• 10 total years of experience in Information Assurance and IT Security
• Experience with technical cloud security work
• Familiarity with JSON, YAML, HCL, and similar for cloud-related tasks and to structure exchange data over the internets
• Demonstrated success in infrastructure as Code (IaC) using Terraform AWS IaC, tool similar to AWS CloudFormation, to create, update, and version the AWS Architecture
• Proficiency with high level programming languages such as C++, C#, Java, Python, Perl, Ruby, Visual Basic

Preferred Education, Experience, & Skills:

• Cyber program experience within federal customer space a plus!
• Certifications such as CISSP, CEH, CISA, CAP highly desired