OverviewThe Information System Security Engineer supports the reliable, secure, and compliant operation of classified information systems, networks, and supporting infrastructure. This position performs day to day administration of servers, virtualized environments, operating systems, network services, user services, storage, backups, cybersecurity, and network-connected systems in support of organizational and customer mission requirements.
The Information System Security Engineer works closely with Information System Security Officers (ISSOs), Information System Security Manager, program personnel, and other stakeholders. The Information System Security Engineer will maintain system availability, implement approved changes, remediate technical issues, and sustain the security posture of the environment.
This is a hands-on, mid-level technical position. The successful candidate will have practical experience administering Windows and/or Linux servers, virtual machines, network services, user accounts and access controls, patching, backups, system monitoring, and technical documentation in a DoD, federal, defense-contractor, regulated, or similar security-conscious environment.
Responsibilities- Contribute to the implementation and maintenance of cybersecurity programs for classified systems
- Configure, maintain, troubleshoot, and document systems prior to and after they receive an Authorization to Operate (ATO)
- Contribute greatly to success of compliance activities associated with NIST SP 800-171, NIST SP 800-53, RMF, applicable STIGs and DCSA and Customer requirements
- Monitor security tools, system logs, audit records, and vulnerability scan results
- Monitor and respond to cybersecurity threats and analysis by reviewing alerts, indicators of compromise, system activity, and security events for potential risks
- Assist with vulnerability management activities, including scan coordination, risk validation, remediation tracking, and verification of corrective actions
- Assist with developing, updating, and maintaining System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), policies, procedures, and other cybersecurity documentation
- Devise new Plans of Actions and Milestones when necessary
- Support system accreditation and authorization activities, including preparation of ATO packages and supporting artifacts
- Participate in security assessments, self-inspections, customer audits, and government reviews.
- Track remediation activities for identified vulnerabilities and security findings
- Coordinate with Information System Security Managers (ISSMs), Facility Security Officers (FSOs), network administrators, and program teams to ensure compliance requirements are met
- Assist with incident response activities, investigations, and reporting requirements
- Maintain cybersecurity records and evidence required for audits and assessments
- Perform day to day security administration and continuous monitoring activities
- Support user account reviews, access control validation, and privileged account management activities
- Promote cybersecurity hygiene across systems and users, including secure configuration, least privilege, strong authentication, patch awareness, and protection of sensitive data
- Ensure proper handling, storage, transmission, and destruction of classified and Controlled Unclassified Information (CUI)
- Participate in security awareness and user training initiatives
- Stay informed of emerging threats, vulnerabilities, and changes to regulatory requirements
- Uphold the company's core values of Integrity, Innovation, Accountability, and Teamwork
- Demonstrate behavior consistent with the company's Code of Ethics and Conduct
- It is the responsibility of every employee to report to their manager or a member of senior management any quality problems or defects in order for corrective action to be implemented and to avoid recurrence of the problem
- Duties may be modified or assigned at any time to meet the needs of the business
Qualifications- Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or related field; or equivalent combination of education and relevant experience
- 5 years of related experience
- Equivalent military or industry experience may be substituted
- Demonstrated experience in information security, cybersecurity, information assurance, system administration, or related technical fields
- Candidates must possess at minimum a Secret security clearance issued by the U.S. Government prior to selection. Active DoD-issued clearances are preferred, although not required. Selected candidate must also be able to maintain the required clearance throughout the course of their employment
Certifications (Preferred)- Security+
- SSCP
- CAP
- CySA+
- Network+
- Certified Information Systems Security Professional (CISSP) Associate
- Microsoft Security Certifications
- CompTIA or DoD 8140-aligned certifications
Physical DemandsWhile performing the duties of this job, the employee is regularly required to sit. The employee frequently is required to walk; use hands to finger, handle or feel; reach with hands and arms; and talk or hear. The employee is occasionally required to stand. The employee must frequently lift or move objects up to 10 pounds and occasionally lift or move objects up to 50 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision and ability to adjust focus.
Please review our benefits here: Life at OSIPay may range from $116,000 to $122,000 annually
The pay range above represents annual base salary only. Final compensation will be determined based on factors such as your job level, geographic location, date of hire, experience, job-related knowledge and skills, and education in conjunction with market and business considerations.
Base salary is one component of your total rewards package. You may be eligible for long-term incentives, potential discretionary bonuses, and the ability to purchase company stock at a discounted rate through the Employee Stock Purchase Program (ESPP). OSI also offers comprehensive benefits including various options for health plans, access to 401(k) retirement plan, health savings account, disability insurance, life insurance, AD&D insurance, leave of absence programs and an array of voluntary benefits. In addition, paid time off is offered to be used for vacation, holidays, bereavement, and jury duty. Full-Time salaried employees are entitled to flexible time-off.
NOTICE TO THIRD PARTY AGENCIESOSI Systems, Inc. and its subsidiaries (collectively "OSI") does not accept unsolicited resumes from recruiters or employment agencies. If any person or entity, including a recruiter or agency, submits any information, including any resume or information regarding any potential candidate, without a signed agreement in place with OSI, OSI explicitly reserves the right to use such information, and pursue and/or hire such candidates, without any financial obligation to the person, recruiter or agency. Any unsolicited information or resumes, including those submitted directly to hiring managers, are considered and deemed to be the property of OSI.
