Sr. Information Systems Security Engineer (ISSE) - (TSSCI Poly)

Herndon, VA (http://maps.google.com/maps?q=Herndon+VA)

Description

We are currently seeking an experienced Information Systems Security Engineer (ISSE) to ensure the integrity and compliance of classified information systems for an Intel Community (IC) customer based in Herndon, VA. Working closely with our on-site team, you will play a critical role in maintaining operational security, developing comprehensive security documentation, and actively monitoring for potential threats. If you're passionate about cybersecurity and possess a strong background in information security, we invite you to join our team!

Responsibilities:

• Act as the primary advisor on all information assurance matters related to classified information systems (IS) within your scope.

• Ensure IS compliance with agency information security policies, standards, and procedures to maintain operational security posture.

• Develop and maintain Assessment & Authorization (A&A) documentation, including System Security Plan (SSP), Security Test Plan (STP), Security Controls Traceability Matrices (SCTM), and Plan of Actions and Milestones (POA&M), in accordance with Risk Management Framework (RMF) processes.

• Support IS security self-assessment activities, including the development of SCTM and STP required for A&A security packages.

• Conduct security auditing of information and events within assigned systems or applications, analyzing security configuration settings and audit logs, and identifying potential threats using tools such as Splunk.

• Report IS security incidents and ensure compliance with vulnerability requirements.

• Ensure compliance with DISA STIGs and maintain operational compliance.

• Collaborate with software developers and architects to address security requirements and policies.

• Manage POA&Ms, develop schedules, and coordinate engineering actions to address open findings.

• Support Continuous Monitoring of operational systems, monitoring and auditing for proper use.

• Review weekly information systems security audits and coordinate corrective actions with project teams.

Requirements

• Active TS/SCI CI Poly security clearance with an original adjudication or periodic reinvestigation within the last 6 years.

• DoD Approved 8570 IAT/IAM Level II Baseline Certification (e.g., Security+).

• Bachelor's degree with 10 years of relevant experience or Master's degree with 8 years of relevant experience, or equivalent experience.

• Minimum of four years of experience as an IA/Security specialist.

• Understanding of the RMF process and practical experience applying NIST 800-53 security control requirements.

• Hands-on experience with risk management tools such as Xacta or EMASS.

• Experience performing the defined responsibilities.

Desired Qualifications:

• IAM DoD level 3 certification (CISM, GSLC, CISSP, or CISSP Associate).

• Practical experience with Splunk and vulnerability assessment tools such as ACAS or Tenable Nessus.

• Knowledge of DoD 8510.01