Information Systems Security Engineer, Senior

Job Description

Job Description

About SITEC

SITEC is an employee and customer focused Information Technology and Professional Services Firm specializing in design, development, and delivery of state-of-the-art technology solutions, as well as cybersecurity, software and systems engineering services. SITEC provides support services as required for continuous operation of the Software Support Activity Software Production Facilities including complete lifecycle services for our customers platforms.

The pay for this position is competitive and commensurate with experience. Embrace this opportunity to showcase your expertise and contribute to our innovative projects. You will be given the opportunity to utilize great benefits such as Medical, Dental, Vision, 401(k), Life Insurance, Health Savings Account, Flexible Spending Account, Competitive Salary, and Paid Time Off. Are you ready to take the next step in your career with us? Apply now!

WHAT DOES AN INFORMATION SYSTEMS SECURITY ENGINEER DO?

Augment a well-established team as an Information Systems Security Engineer. This is a collaborative team environment that entails frequent interaction with customers. This is a fast-paced team so a willingness to take on challenges to creatively solve customer requirement problems will be required. The successful candidate for Information Systems Security Engineer will be self-motivated and will support new development work as well as sustainment activities.

Embrace the opportunity to showcase your Information Systems Security Engineer expertise and contribute to impactful projects with a forward-thinking team!

WOULD YOU BE A GREAT INFORMATION SYSTEMS SECURITY ENGINEER ?

(ISSE) will perform and review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies. The successful candidate will validate and verify system security requirements definitions and analysis and establishes system security designs. Designs, develops, implements and / or integrates IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection / classification requirements. Builds IA into systems deployed to operational environments. Assists architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Agency security policy and enterprise solutions.

In addition, the ISSE will support the building of security architectures while enforcing the design and implementation of trusted relations among external systems and architectures. Assesses and mitigates system security threats / risks throughout the program life cycle. Contributes to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations. Reviews certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content. Applies system security engineering expertise in one or more of the following to : system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification; authentication; and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing. Support security authorization activities in compliance with Agency / CSS Information System Certification and Accreditation Process (NISCAP) and DoD Risk Management Framework (RMF), the NIST Risk Management Framework (RMF) process, and prescribed Agency / CSS business processes for security engineering.

Requirements

• TS / SCI with Poly at time of application
• Bachelor's degree in Computer Science, Information Assurance, Information. Security System Engineering, or related discipline from an accredited college or university is required. Four (4) years of ISSE experience may be substituted for a bachelor's degree.
• LEVEL 2 ISSE : Fourteen (14) years' experience as an ISSE on programs and contracts of similar scope, type, and complexity is required.
• LEVEL 3 ISSE : Twenty (20) years' experience as an ISSE on programs and contracts of similar scope, and complexity is required.
• Experience manually reviewing network diagrams, network device configurations, termination points for VPNs and working knowledge of software TLS security.
• Maintain flexible and non-traditional Risk Management Framework (RMF) review of unclassified / classified networks to assess and prescribe countermeasures for secure communications.
• Familiar with applying different security standards and frameworks. Ability to create security assessment reports, adhoc technical / administrative tasks, keen writing skills and leadership qualities.
• Strong crypto, network and cloud computing background.
• Participate as a security engineering representative on engineering teams for the design, development, implementation and / or integration of secure networking, computing, and enclave environments
• Participate as a security engineering representative on engineering teams for the design, development, implementation and / or integration of IA architectures, systems, or system components
• Participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and / or integration of secure networking, computing, and enclave environments
• Apply knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments
• Interact with the customer and other project team members
• Participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and / or integration of IA architectures, systems, or system components
• Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures
• Support security planning, assessment, risk analysis, and risk management
• Identify overall security requirements for the proper handling of Government data
• Provide security planning, assessment, risk analysis, and risk management
• Perform system or network designs that encompass multiple enclaves, to include those with differing data protection / classification requirements
• Recommend system-level solutions to resolve security requirements
• Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures

Certifications

Join our team today!

We believe in taking care of our team, both on and off the job. That's why we offer a mobile-friendly application process - because we know your time is valuable. If you're ready to take your skills to the next level and join a team that values hard work and good times, complete our application today!

Job Posted by ApplicantPro