Information System Security Engineer (ISSE)

Gssr - Suitland, MD

Full-time

Suitland, MD

Professional, Scientific, and Technical Services

About the position

The Information System Security Engineer (ISSE) is responsible for ensuring the security and integrity of information systems for both in-house and external customers. This role involves supporting the information assurance program by proposing, coordinating, implementing, and enforcing security policies, standards, and methodologies. The ISSE will maintain the operational security posture and manage day-to-day security operations, ensuring compliance with established security protocols.

Responsibilities

• Maintain the operational security posture of information systems, ensuring compliance with established security policies, standards, and procedures.
• Manage day-to-day security operations of the system, providing ongoing support and monitoring.
• Evaluate security solutions to ensure they meet the necessary requirements for processing classified information.
• Conduct vulnerability and risk assessments to support certification and accreditation processes.
• Perform configuration management for information system security software, hardware, and firmware.
• Assess the security impact of system changes and manage those changes effectively.
• Prepare and review documentation, including Systems Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Support security authorization activities, adhering to NSA/CSS Information System Certification and Accreditation Process (NISCAP) and DoD Information Assurance Certification and Accreditation Process.

Requirements

• 10 years' experience in a Cyber Security and IT related field with deep understanding of hardening government information systems from initial development to final delivery.
• Must have CISSP certification.
• DevSecOps or DevOps experience.
• Risk Management Framework (RMF) experience.
• CLOUD experience.
• Waterfall and AGILE development experience or HYBRID experience.
• Experience in a multidiscipline and multi-environmental setting.
• Minimum Bachelor's degree, Master's preferred.

Nice-to-haves

• CISM
• CRISC
• Sec +
• ITIL 3
• CAS
• CSM
• CEH