Senior Information Systems Security Engineer (ISSE)

Applied Research Solutions; Bedford (MA); On-site; USD 178,000 - 198,000; Full time

Job summary

Applied Research Solutions is seeking a Senior Information Systems Security Engineer (ISSE) for a position at Hanscom AFB, Bedford, MA. A Top-Secret Clearance is required, with background screening for SAP.

The role covers RMF/A&A for weapon systems, security measures, threat assessment, and secure architecture reviews. Experience with DoD programs and DevSecOps practices is essential; US citizenship is required.

Qualifications

• Must be a US citizen.
• 15 years of Cyber-Security experience and 5 years DoD experience; or 12-year with MA/MS; or 20 years with certifications.
• DoD 8570.01 MMGT512 compliant certification.
• Experience with Risk Management Framework (RMF).
• Active Top Secret Security Clearance.

Responsibilities

• Support A&A for weapon systems and PIT Systems, guiding RMF artifacts and policies.
• Recommend policies to ensure reliability and prevent unauthorized access.
• Develop, execute, and track security measures for information and networks.
• Review architectures and suggest cybersecurity strategies for designs.
• Assess threats to reduce risk and translate requirements into technical solutions.
• Promote security awareness in life cycle development and systems design.
• Understand DevSecOps to identify security flaws during code review.

Skills

RMF

DevSecOps

Linux

Cloud development

Threat assessment

System security requirements

Security architecture

Risk management

A&A processes

US citizenship

Education

BA/BS degree

MA/MS degree

20 years related experience

DoD 8570.01 MMGT512 certification

Active Top Secret clearance

Tools

Nessus

ACAS

SCC/SCAP

STIGs

Job description

Applied Research Solutions is seeking a Senior Information Systems Security Engineer (ISSE) candidate located at Hanscom AFB, Bedford, MA. This role requires a Top-Secret Clearance and the employee to pass background screening for SAP.

Responsibilities

• Support the system/application authorization and accreditation (A&A) effort for weapon systems and PIT Systems, including assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts mandated by governing DoD and Air Force policies (i.e., Risk Management Framework (RMF). Understanding of how RMF intersects with the acquisition process and how it’s used to generate requirements; how RMF and Cybersecurity should be covered in contracts – requirements, deliverables, PWS/SOW language. Understanding how to work through RMF and controls with a program to establish appropriate levels of risk based on program lifecycle and mission requirements.
• Recommend policies and procedures to ensure the reliability of and accessibility to information systems and to prevent and defend against unauthorized access to systems, networks, and data.
• Develop, execute, and track the performance of security measures to protect information and network infrastructure and computer systems.
• Review and assess architectures and recommend cybersecurity strategies to developmental and legacy system designs.
• Assess threats to determine impact and recommend corrective actions to program managers to reduce risk.
• Translate program/system requirements into technical requirements and architectures needed to meet program objectives.
• Life cycle development Promote awareness of security issues among management and ensuring sound security principles are reflected in program’s’ visions and goals. Participate in systems design.
• Understanding of DevSecOps environments to check for security flaws and vulnerabilities during code review.
• Understanding of operating systems including Linux, Ubuntu, IoT systems, ZTA environments and Cloud development.
• Identify, define, and document system security requirements and recommend solutions to management.
• Plan, develop, implement, and update Cyber Security Strategy Information within the Program Protection Plan (PPP) and assess CPI (Critical Program Information) and CC (Critical Components) analysis.
• Recommend and review Tempest requirements, systems security contingency plans and disaster recovery procedures.
• Experience with compliance and vulnerability and software scanning tools (STIGs, Nessus, ACAS, SCC/SCAP, etc.) to include the review and creation of mitigation reports.
• Review the Vendor submitted Contract Data Requirement List (CDRL) items for Cybersecurity related areas, to ensure technical requirements have been met, and provided substantial comments and recommendations to the Program Management (PM) team as to adequacy of the CDRL.
• Other duties as assigned.

Qualifications / Technical Experience Requirements

• Must be a US citizen
• BA/BS Degree, and 15 years of Cyber-Security experience and 5 years DoD experience; or MA/MS Degree and 12-year experience, 5 years in DoD; or 20 years of directly related experience with proper certifications of which 8 years are in DoD
• DoD 8570.01 MMGT512 compliant certification.
• Experience with the Risk Management Framework (RMF).
• Active Top Secret Security Clearance

The expected annual salary range: $178k - $198k. Salary is dependent upon the role and associated responsibilities, candidate's experience, and qualifications, including education/training, and key skills.

All positions at Applied Research Solutions are subject to background investigations. Employment is contingent upon successful completion of a background investigation including criminal history and identity check.

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-741.5(a). This regulation prohibits discrimination against qualified individuals based on disability and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities.

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-300.5(a). This regulation prohibits discrimination against qualified protected veterans and requires affirmative action by covered contractors and subcontractors to employ and advance in employment qualified protected veterans.