Sr. Information Systems Security Officer SE5

2HB Incorporated; Annapolis (MD); On-site; USD 150,000 - 190,000; Full time

Job summary

2HB Incorporated is seeking a Sr. Information Systems Security Engineer to support a government customer in Annapolis Junction, MD. The role focuses on defending critical networks through CTI initiatives and rigorous security engineering.

The candidate will conduct assessments, develop security policies, and support RMF processes. A TS/SCI/Full Scope Polygraph clearance is required, with strong Linux and cloud security skills and excellent writing and communication abilities.

Qualifications

• Experience assessing IT architectures for security compliance with frameworks (e.g., ICD 503).
• Develop IT security policies, standards and guidance.
• Input to A&A processes and documentation such as system security design and operation procedures.
• Support authorization/accreditation testing and evaluation activities.
• Provide continuous monitoring of information systems.
• Produce security deliverables for operational systems and development projects.
• Evaluate security architectures for compliance with objectives.
• Identify, track, and mitigate system vulnerabilities.
• Understand government sector cybersecurity policies and risk frameworks.
• Proficient in Linux and cloud security (AWS/Azure).
• Communicate clearly in writing for executive and technical audiences.
• Understand information security risk assessment techniques.
• Experience with scanning tools like Nessus.
• Familiar with RMF tools (Xacta, LatteArt).
• CISSP Certification is preferred.

Responsibilities

• Assess existing IT architecture for security compliance with applicable frameworks.
• Develop and update IT security policies, standards and guidance.
• Contribute to A&A process artifacts and system security design documents.
• Provide engineering support for authorization and accreditation testing activities.
• Maintain continuous monitoring for information systems.
• Create security architecture deliverables for systems under development and operation.
• Evaluate proposed security designs for adequacy against objectives.
• Develop and maintain vulnerability tracking and mitigation processes.
• Leverage government cybersecurity policies and risk assessment methodologies.
• Apply strong Linux and cloud security practices to protect systems.
• Prepare clear, concise security documentation for executives and staff.
• Collaborate with teams to ensure security across the lifecycle.

Skills

IT security assessment

Security policies

A&A documentation

Security engineering

Continuous monitoring

Security architecture deliverables

Vulnerability management

Government cybersecurity

Linux proficiency

Cloud security (AWS/Azure)

Technical writing

Communication

Risk assessment

Nessus

RMF tools (Xacta, LatteArt)

CISSP Certification

Tools

Xacta

LatteArt

Nessus

Job description

Sr. Information Systems Security Officer

• Annapolis Junction, MD

This is a full-time position, and requires a TS/SCI/Full Scope Polygraph Clearance.

2HB Incorporated is seeking a Sr. Information Systems Security Engineer to support its government customer in Annapolis Junction, MD. The successful candidate will be able to support the Cyber Threat Intelligence (CTI) initiative which defends of our nation’s most critical unclassified and classified networks.

Required Skills:

• Conduct assessments of existing IT architecture for compliance with security requirements from applicable security frameworks (such as ICD 503)
• Develop IT security policies, standards, and guidance
• Provide input to A&A process activities and related documentation such as systems concept of operations, system security design, implementation plans, operational procedures, and maintenance training materials
• Provide engineering support and assistance to authorization/accreditation test and evaluation activities
• Provide continuous monitoring support for information systems
• Develop IT architecture deliverables, specific to information security countermeasure implementations, for operational systems and systems under development
• Evaluate proposed security architectures and designs and provide input as to the adequacy of those security designs to meet required security compliance objectives
• Develop and maintain processes and procedures to identify, track and mitigate customer system vulnerabilities
• In-depth understanding of the cybersecurity policies and procedures for government sector information systems
• Strong understanding of Linux-based operating systems
• Strong understanding of cloud services (AWS, Azure) and related security services
• Strong writing skills: able to clearly articulate ideas for executive level as well as technical staff consumption
• Strong communications skills: able to work well with others, independently and as part of a team
• Strong understanding of information security principles and risk assessment techniques
• Experience with using NESSUS and other scanning applications
• Experience with customer RMF processes and tools (i.e. Xacta, LatteArt, etc.)
• CISSP Certification

This is a full-time position, and requires a TS/SCI/Full Scope Polygraph Clearance.