Information System Security Engineer (ISSE)

C

Cinteot

Information System Security Engineer (ISSE)

Fort Meade, MD
Full Time
Paid
  • Responsibilities

    Information System Security Engineer, (ISSE)

    As an Information Systems Security Engineer (ISSE), you'll:

    • Facilitate sub-projects as they go through the Risk Management Framework (RMF) accreditation life cycle.
    • Support the periodic system security scans as required by policy and the RMF.
    • Validate and verify system security requirement definitions and analyze system security designs.
    • Perform technical security assessments of computing environments to identify points of vulnerability, and then recommend mitigation strategies for those that do not comply with established Information Assurance (IA) standards.
    • Experience manually reviewing network diagrams, network device configurations, termination points for VPNs, and a working knowledge of software TLS security.
    • Able to maintain a flexible and non-traditional RMF review of secure networks to assess and prescribe countermeasures for secure communications e.g. analog radio, mobile cellular, remote kits, software/hardware-based VPN solutions and VDI technologies.
    • Familiar with applying different standards and security frameworks to include CIS benchmarks, FIPS 140-2, DISA Stigs, CNSA cryptographic suite compliance, etc.
    • Participated as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments.Participated as a security engineering representative on engineering teams for the design, development, implementation and/or integration of IA architectures, systems, or system components.
    • Supported the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
    • Applied knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments
    • Supported security planning, assessment, risk analysis, and risk management.
    • Identified overall security requirements for the proper handling of Government data.

    Required Qualifications **** **
    **

    • Bachelor's degree in Cybersecurity, Information Technology, or related field.
    • Must hold and maintain an appropriate DoD 8140.03 / 8570.01-M certification baseline for this labor category (e.g., Security+, CISSP, CISM, or equivalent as required).
    • At least 7 years of experience in cybersecurity engineering, RMF/DIACAP accreditation, and compliance documentation in DoD environments.
    • Expertise in the application of DISA STIGs/SRGs, ACAS/HBSS vulnerability analysis, and eMASS package preparation.
    • Strong written and verbal communication skills, with demonstrated experience producing accreditation documentation and presenting risk findings to senior stakeholders.

    Desired Qualifications

    • Master's degree in Cybersecurity or related discipline.
    • Experience supporting DISA programs and preparing for CCRI inspections.
    • Advanced certifications such as CISSP-ISSAP or CISM.

    Clearance Requirement
    Active Top Secret / SCI clearance.

    **
    **