TS/SCI Information System Security Developer

Insight Global; St. Louis (MO); On-site; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a skilled Information System Security Developer to enhance cybersecurity measures and ensure the integrity of systems. This role involves analyzing design constraints, developing security countermeasures, and conducting technical audits to safeguard sensitive information. You'll work on integrating hardware and software solutions while evaluating security designs and conducting vulnerability scans. If you have a passion for cybersecurity and want to make a significant impact in a dynamic environment, this opportunity is perfect for you.

Qualifications

• 4+ years of experience in cybersecurity and information system security.
• Active TS/SCI Security Clearance required for this role.

Responsibilities

• Analyze design constraints and apply security policies to applications.
• Conduct Privacy Impact Assessments for security design.

Skills

Cybersecurity principles

Technical audits

Vulnerability scanning

Security design evaluation

Security countermeasures

Integration of hardware and software

Education

Bachelor’s degree in Computer Science

Bachelor’s degree in Cyber Security

Bachelor’s degree in Information Technology

Bachelor’s degree in Software Engineering

Bachelor’s degree in Mathematics or Engineering

Tools

TOGAF

DoDAF

FEAF

Job description

TS/SCI Information System Security Developer

Position: Information System Security Developer (Mid-level)

Location: St. Louis, MO, New NGA Campus

Supporting the Defender contract through Triple Cyber

Duration: Perm

Interview Process: 1 round virtual

Start: ASAP

Requirements:

1. 4+ Years of experience
2. Active TS/SCI Security Clearance
3. Bachelor’s degree or higher from an accredited college or university in Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree; or a degree in a Mathematics or Engineering field.

Desired Skillset:

• Experience designing security countermeasures and controls
• Integration of hardware and software solutions
• Security system access controls
• Evaluating security designs
• Conducting technical audits
• Experience applying cybersecurity and privacy principles
• Conducting vulnerability scans
• Knowledge of IT architecture frameworks (e.g., TOGAF, DoDAF, FEAF)

Day to Day:

The Information System Security Developer will analyze design constraints, trade-offs, and detailed system and security design, considering life cycle support. They will apply security policies to applications that interface with one another, such as Business-to-Business (B2B) applications. The developer will assess the effectiveness of cybersecurity measures utilized by systems and evaluate threats and vulnerabilities to develop a security risk profile. They will build, test, and modify product prototypes using working models or theoretical models. Conducting Privacy Impact Assessments (PIAs) of the application’s security design for appropriate security controls, which protect the confidentiality and integrity of Personally Identifiable Information (PII), is also part of the role. The developer will design and develop cybersecurity or cybersecurity-enabled products, as well as hardware, operating systems, and software applications to adequately address cybersecurity requirements. They will design or integrate appropriate data backup capabilities into overall system designs, ensuring secure system backups and protected storage of backup data.

Additional Responsibilities:

• Develop and direct system testing and validation procedures and documentation
• Create detailed security design documentation for component and interface specifications to support system design and development
• Develop Disaster Recovery and Continuity of Operations plans for systems under development, ensuring testing prior to systems entering a production environment
• Develop risk mitigation strategies to resolve vulnerabilities and recommend security changes to systems or system components as needed
• Develop specific cybersecurity countermeasures and risk mitigation strategies for systems and/or applications
• Identify components or elements, allocate security functions to those elements, and describe the relationships between the elements
• Identify and direct the remediation of technical problems encountered during the testing and implementation of new systems, such as identifying and finding workarounds for communication protocols that are not interoperable