Information System Security Engineer, (ISSE)As an Information Systems Security Engineer (ISSE), you'll:
- Facilitate sub-projects as they go through the Risk Management Framework (RMF) accreditation life cycle.
- Support the periodic system security scans as required by policy and the RMF.
- Validate and verify system security requirement definitions and analyze system security designs.
- Perform technical security assessments of computing environments to identify points of vulnerability, and then recommend mitigation strategies for those that do not comply with established Information Assurance (IA) standards.
- Experience manually reviewing network diagrams, network device configurations, termination points for VPNs, and a working knowledge of software TLS security.
- Able to maintain a flexible and non-traditional RMF review of secure networks to assess and prescribe countermeasures for secure communications e.g. analog radio, mobile cellular, remote kits, software/hardware-based VPN solutions and VDI technologies.
- Familiar with applying different standards and security frameworks to include CIS benchmarks, FIPS 140-2, DISA Stigs, CNSA cryptographic suite compliance, etc.
- Participated as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments.Participated as a security engineering representative on engineering teams for the design, development, implementation and/or integration of IA architectures, systems, or system components.
- Supported the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
- Applied knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments
- Supported security planning, assessment, risk analysis, and risk management.
- Identified overall security requirements for the proper handling of Government data.
Required Qualifications- Bachelor's degree in Cybersecurity, Information Technology, or related field.
- Must hold and maintain an appropriate DoD 8140.03 / 8570.01-M certification baseline for this labor category (e.g., Security+, CISSP, CISM, or equivalent as required).
- At least 7 years of experience in cybersecurity engineering, RMF/DIACAP accreditation, and compliance documentation in DoD environments.
- Expertise in the application of DISA STIGs/SRGs, ACAS/HBSS vulnerability analysis, and eMASS package preparation.
- Strong written and verbal communication skills, with demonstrated experience producing accreditation documentation and presenting risk findings to senior stakeholders.
Desired Qualifications- Master's degree in Cybersecurity or related discipline.
- Experience supporting DISA programs and preparing for CCRI inspections.
- Advanced certifications such as CISSP-ISSAP or CISM.
Clearance RequirementActive
Top Secret / SCI clearance.
