Space Ground System Solutions (SGSS), a subsidiary of Parsons, has an immediate full-time opening for an Information Systems Security Engineer (ISSE) to be part of the Blossom Point Information Assurance team working onsite in Welcome, MD. This position would be responsible for upgrading and maintaining the security posture of all stand-alone and networked environments at Blossom Point and requires knowledge of information security accreditation activities, risk assessment tools, disaster recovery, technologies, and methods.
JOB RESPONSIBILITIES- Engineer, implement, and maintain secure system architectures in accordance with NIST Risk Management Framework (RMF) (SP 800-37), NIST SP 800-53, Committee on National Security Systems Instruction (CNSSI) 1253, DoD Instruction (DoDI) 8510.01 - Risk Management Framework, and applicable Agency cybersecurity policies.
- Conduct security planning, security architecture reviews, risk assessments, vulnerability analysis, and risk management activities throughout the system development lifecycle in accordance with the RMF, DoDI 8510.01, and NIST SP 800-37.
- Assist system architects, engineers, and software developers with integrating cybersecurity controls into system designs using security-by-design principles and enterprise security architectures consistent with NIST SP 800-160, NIST SP 800-53, and Agency cybersecurity guidance.
- Support Assessment and Authorization (A&A) activities by preparing and maintaining RMF artifacts including the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), Plan of Action & Milestones (POA&M), and supporting authorization packages. Contributes to security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations
- Support vulnerability management activities by reviewing security scan results, evaluating findings, recommending remediation strategies, and verifying corrective actions in accordance with Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), and Agency vulnerability management processes..
- Interface effectively with Government customers, program managers, engineers, developers, and external mission partners to communicate cybersecurity risks, recommend mitigations, and support secure system implementation throughout the acquisition and operational lifecycle.
REQUIRED SKILLS AND QUALIFICATIONS- Must have an active DoD Secret security clearance with ability to obtain a TS /SCI after hire
- Must be a US Citizen
- Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university is required; Four (4) years of ISSE experience may be substituted for a bachelor's degree
- Minimum of 8 years ISSE experience
- Knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments
- On-call support - available to report to site 24/7 for one week of every eight to ten weeks
- On-call support - must be within 1 hour of site during on-call rotations
PREFERRED SKILLS AND QUALIFICATIONS- Information Technology: Experience with configuring routers, firewalls and other network appliances to meet functional and security constraints
- Computer operating system experience with LINUX-based and Windows-based platforms
- Experience ACAS, Tenable, Iron Bank, SPLUNK
SGSS believes in taking care of their employees by offering:
- ALL benefits fully funded, for your entire family
- this includes Medical/Dental/Vision/Group Life/STD/LTD - no employee premiums
- SGSS funded HSA (Health Savings Account) provided
- with SGSS funding the maximum amount allowed by the IRS
- Retirement Savings Plan (RSP/401k) with a 20% annual company contribution - no employee contribution required
If this position requires a government clearance, the applicants selected will be subject to a government security investigation and must meet eligibility requirements for accessing classified information.
