The Information Systems Security Engineer shall research, compile and document reviews, drawings, schematics, and reports, interviews with technical staff members, and the study of published material for use in various logistics documents, technical manuals, test plans and reports, training materials, installation guides, and other technical documentation.
Information Systems Security Engineer shall be proficient in DISA STIG procedures to include ACAS, HBSS, SCAP and network scanning.
Information Systems Security Engineer is required to have and maintain a current DoD IAM Certification.
The Information Systems Security Engineer shall develop written instructions, procedures, schematics and other technical documentation; and likewise, review, redline or rewrite written instructions, procedures, schematics and other technical documentation in support of In-Service information technology tools.
The Information Systems Security Engineer shall be capable of performing all duties unsupervised.
The Information Systems Security Engineer shall provide the status of assigned tasks via both prepared and ad hoc oral briefings to project manager.
The ISSE is knowledgeable and can direct FISMA compliance and requirements.
Decompose system specifications to determine security/IA requirements and work with systems engineers, developers, and other security personnel to develop management and operational procedures, when required, to meet those requirements
Develop system security/IA plans and controls under guidance in DIACAP, RMF, NIST 800-53, NIST 800-37, CNSS 1253, DCID 6/3, and NISCAP
Shepherd System Security Plans through inception to decommission utilizing the eMASS work-flow and RMF process
Review auditevents and data for information systems and coordinate events/incidents that may occur with stakeholders.
Define Certification Test & Evaluation requirements.
Coordinate with program management and customers to mitigate risks and ensure compliance with DoD IA requirements.
The ISSE shall have a minimum of four plus (4+) years within the last 8 years of Navy C4I(S) experience.
The proposed ISSE shall have three plus (3+) years of recent experienceapplying and managing Information Assurance (IA) requirements in a DOD environment (in accordance with the DoD 8570
Information Assurance Workforce Improvement Program)
LAN/WAN systems including systems analysis, systems/equipment support, software development, test and evaluation, and systems integration.
Must be able to obtain/maintain a SECRET Security Clearance.