Sr. Information Systems Security Engineer (ISSE), (Vulnerability Management)

Cyberspace Solutions, LLC; Virginia; On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a skilled Information Systems Security Officer to oversee all aspects of information security. The role involves conducting risk analyses, implementing security controls, and ensuring compliance with security policies. You will work closely with cloud environments, safeguarding sensitive data against unauthorized access. This position offers an exciting opportunity to contribute to innovative security solutions while working in a collaborative environment. If you are passionate about information security and want to make a meaningful impact, this role is perfect for you.

Qualifications

• 7 years of experience in Information Assurance and IT Security with a focus on cloud security.
• Ability to analyze vulnerabilities and recommend corrective actions.

Responsibilities

• Conduct risk analyses and manage the organization's information security system.
• Implement security controls in government cloud environments.

Skills

Cloud Security

Risk Management Framework

Vulnerability Analysis

Technical Security Controls

Scripting Languages (Perl, Python, PowerShell)

Network Security

Security Engineering

Compliance Reporting

Education

Bachelor’s Degree

IAT Level III Certification

Tools

Burp Suite

Rapid7 InsightVM

Tenable Nessus

AWS

Azure

Google Cloud

Job description

Overview

The Information Systems Security Officer (ISSO) manages all aspects of an organization's information security system, including researching, testing, training, and implementing programs to safeguard sensitive information from breaches. The ISSO drives Authority to Operate (ATO) and Authority to Proceed (ATP) efforts and makes independent recommendations to the customer. They understand and execute the Risk Management Framework process, conducting risk analyses and producing documents such as System Security Plans, Security Policies, Contingency Plans, and Business Impact Analyses.

Responsibilities

As an Information Systems Security Engineer (ISSE), support the customer in safeguarding networks against unauthorized modification, destruction, or disclosure. Activities include:

1. Conducting risk analyses on products, reviewing CVEs, plugins, CWEs, etc.
2. Explaining and remediating technical security controls.
3. Facilitating Technical Insertions for new products.
4. Reviewing change requests for security impacts and documentation.
5. Participating in Agile Planning Events to provide technical input.
6. Providing technical input into tool trade studies.
7. Implementing security controls in government cloud environments (cloud security experience is highly desired).
8. Researching, testing, evaluating, and implementing new security software or devices.
9. Enforcing and communicating security policies for data, networks, software, hardware, and telecommunications.
10. Managing all aspects of the organization's information security system, including training and program implementation.

Qualifications

Required Education, Experience, & Skills

• Bachelor’s Degree with 7 years of related experience including cloud security OR 10 years of experience in Information Assurance and IT Security.
• Obtain and maintain an IAT Level III baseline certification within 90 days of hire.

Required Clearance: Secret

Specific to Cloud Environment Vulnerability Management

• Expertise in system security vulnerabilities, remediation techniques, network and web protocols (e.g., TCP/IP, UDP, IPSEC, HTTP).
• Experience with security engineering, system and network security, cryptography, and application security.
• Experience with vulnerability scanning tools such as Burp Suite, Rapid7 InsightVM, Tenable Nessus, and others.
• Ability to analyze vulnerabilities, establish cause and impact, and recommend corrective actions.
• Experience in vulnerability validation, remediation, and testing.
• Proficiency in scripting languages (e.g., Perl, Python, PowerShell).
• Experience with system administration in Windows and Linux.
• Experience with cloud platforms like AWS, Azure, or Google Cloud.

The ISSE supports the ISSO in managing the organization's information security, including risk analysis, compliance reporting, and responding to audit activities.

• Conduct risk analyses from vulnerability scans, pen tests, and audits.
• Submit monthly scan data for FISMA compliance.
• Respond to data calls, scan requests, and reporting requirements.

Preferred Education, Experience, & Skills

Desired Certifications: CISSP, CCSP, AWS-SEC, MCASEA

Equal Employment Opportunity

All employment decisions are made without regard to age, race, creed, color, religion, sex, national origin, disability, veteran status, sexual orientation, gender identity, or other protected categories. Illuminate is committed to veteran employment opportunities.