Senior Information Systems Security Engineer (ISSE)

DAn Solutions; Reston (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

DAn Solutions in Reston, VA seeks a Sr. ISSE with active TS/SCI clearance and CI poly to support classified programs onsite. You will ensure DIA C&A and IA compliance, design secure systems, and assist in RMF-based authorization tasks across the lifecycle.

The role requires advanced Windows and Linux skills, hands-on security tool experience, and compliance with 8570 IAT Level 2. On-site work only, with no telework.

Qualifications

• Advanced Windows administration and Linux proficiency.
• Security credentials and experience commensurate with the job description.
• Practical experience deploying and troubleshooting security tools.
• Ability to critically assess practices and implement improvements.
• Excellent problem-solving and attention to detail.
• Familiar with ACAS, Trellix, Splunk, STIGs.
• Bachelor's degree with 4 years' relevant experience (or 8 years).
• 8570 compliant (IAT Level 2) by security indoctrination.

Responsibilities

• Provides technical expertise to ensure network systems meet DIA C&A and IA requirements and are properly certified.
• Responsibilities are full-time on customer's onsite; no telework.
• Designs, develops, and recommends integrated security systems to protect data.
• Supports RMF A&A process to obtain/maintain IATT, ATC, and ATO.
• Assists in incident response and remediation efforts as needed.
• Collaborates with stakeholders to align security with organizational goals.
• Develops test plans to assess security posture and validates controls.

Skills

Windows administration

Linux proficiency

Powershell scripting

Security tools knowledge

On-site security operations

Education

Bachelor's degree in a relevant field

4 years of relevant experience in lieu of degree

8570 compliance (IAT Level 2) by security indoctrination

Tools

ACAS

Trellix

Splunk

STIGs

Job description

REQUIRES AN ACTIVE/EXISTING TS/SCI WITH CI POLYRAPH

The job duties of the Sr. ISSE are as follows:

• Provides technical expertise to ensure the network systems meet DIA C&A and IA requirements and are properly certified and accredited
• Responsibilities are full-time on customer's onsite and will cover classified programs and Special Access Programs (SAP). No Telework.
• Designs, develops, and recommends integrated security system and physical control solutions that will ensure proprietary/confidential data and systems are protected
• Assist team in DIA's Authorization and Accreditation (A&A) process using RMF across the design lifecycle for classified systems obtaining and maintaining Interim Authorization to Test (IATT), Authority to Connect (ATC) and Authorization to Operate (ATO)
• Offers technical engineering services for the support of integrated security systems and solutions, managing information-related risks effectively
• Works closely with the client during the strategic design process to translate security and business requirements into actionable technical designs
• Configures and validates secure systems and physical controls, and tests security products and systems to detect security weakness
• Develop comprehensive system test plans (STP) to assess the security posture of the information systems
• Analyze scan results and security findings to prioritize remediation efforts and implement corrective measures
• Participate in incident response activities and assist in the resolution of security incidents as needed

Requirements:

• Exhibits advanced Windows administration capabilities and Linux proficiency for optimal system management
• Security credentials, certifications, and experience commensurate with the job description
• Practical experience deploying, maintaining, and troubleshooting security tools
• Demonstrates the ability to critically assess current practices, identify deficiencies, propose innovative solutions, and effectively implement these improvements
• Thrives in a fast-paced, complex environment; displays exceptional poise and an unwavering commitment to hard work
• Displays excellent problem-solving abilities and attention to detail
• Experience with each of the following security tools: Assured Compliance Assessment Solution (ACAS), Trellix, Splunk, and Security Technical Implementation Guide (STIG)'s
• Collaborate with stakeholders to identify security requirements and ensure alignment with organizational objectives
• Stay abreast of the latest security trends, technologies, and best practices to continually enhance the security posture of the information systems
• A Bachelor's Degree from an accredited institute in an area applicable to this position and four (4) years of relevant experience
• An additional four (4) years of relevant experience may be substituted for the bachelor's degree
• Must presently be 8570 compliant (IAT Level 2 preferred); must be 8570 compliant (IAT Level 2) by date of security indoctrination with any necessary continuing education (CE) for certification

Desired Qualifications:

• Familiar with tiered security environments (U, S, TS)
• Deep understanding of Trellix antivirus suite of products
• Knowledge of Splunk architecture and experience structuring multi-level queries
• Windows expert - capable of advanced Powershell scripting and general administrative functions
• Experience with one or more commercial government cloud service provider's system accreditation process
• Experience as a Cybersecurity Control Assessor for SAP
• Experience with Ongoing Authorizations and Assessments
• Experience with C2S Cloud, or DevOpsSec