Cyber Defense Technologies · 2 months ago
Information System Security Engineer (ISSE) with TS/SCI with FS Poly
Chantilly, VA
Full-time
Onsite
Mid, Senior Level
5+ years expCyber Defense Technologies (CDT) is currently seeking a skilled Information System Security Engineer to implement security standards across diverse systems. The role involves applying Information Assurance concepts, supporting Cyber Security processes, and ensuring compliance with DoD security policies.
Cyber SecurityInformation TechnologySecurity
No H1B
Security Clearance RequiredU.S. Citizen Only
Responsibilities
Applies knowledge and understanding of Information Assurance (IA) concepts, practices, and procedures using established DoD security policies and standards to mitigate RMF security risks
Support the establishment of end-to-end Cyber Security processes and procedures to streamline AO/DAO approvals and to establish IT security standards in accordance with current DOD and IC policy guidance
Experience with administering, maintaining, implementing upgrades, and ensuring the readiness of several classified virtual enterprise systems and corresponding technologies (e.g. Enterprise Linux, Cisco Systems (Switch, Router, NGFW), Red Hat, Palo Alto, Windows Server, Windows Workstation)
Identify and mapping NIST 800-53 controls, DISA Control Correlation Identifiers (CCI), and Security Requirements Guides (SRGs) families to appropriately tailor controls to submit new systems and capabilities for review by Authorizing Officials (AO)
Ability to implement/engineer security safeguards (e.g. STIGs) on enterprise and embedded systems to a variety of hardware platforms
Perform appropriate continuous monitoring and systems security testing using tools such as Nessus Security Center/ACAS, and Splunk Enterprise
Implement security monitoring solutions as required to meet IA requirements for Risk Management Framework (RMF) as applies to systems and sensors allocated to regions/AORs as outlined by end customer & users
Assist with the client’s progress towards completion of POA&Ms
Guide projects and programs through successful assessment and authorization of systems components for Authority to Operate (ATO)
Perform system hardening utilizing STIGs
Focuses on threats, vulnerabilities, and the security of programs, systems, and devices
Provides special consideration for intrusion detection, identifying and mitigating vulnerabilities, and ensuring that remote access points are secure
Create security test cases and assist in the performance general security testing
Qualification
Required
An active Top Secret/SCI with Full Scope Poly clearance is required
2+ years of experience as an ISSE
5+ years of experience in Information System Security
Advanced understanding of engineering principles and Security Technical Implementation Guides (DoD) is required
Experience with administering, maintaining, implementing upgrades, and ensuring the readiness of several classified virtual enterprise systems and corresponding technologies (e.g. Enterprise Linux, Cisco Systems (Switch, Router, NGFW), Red Hat, Palo Alto, Windows Server, Windows Workstation)
Ability to implement/engineer security safeguards (e.g. STIGs) on enterprise and embedded systems to a variety of hardware platforms
Perform appropriate continuous monitoring and systems security testing using tools such as Nessus Security Center/ACAS, and Splunk Enterprise
Implement security monitoring solutions as required to meet IA requirements for Risk Management Framework (RMF) as applies to systems and sensors allocated to regions/AORs as outlined by end customer & users
Guide projects and programs through successful assessment and authorization of systems components for Authority to Operate (ATO)
Perform system hardening utilizing STIGs
Focuses on threats, vulnerabilities, and the security of programs, systems, and devices
Provides special consideration for intrusion detection, identifying and mitigating vulnerabilities, and ensuring that remote access points are secure
Create security test cases and assist in the performance general security testing
Preferred
Cyber Security Certifications desired (CISSP, CISM, CISA, CompTIA Security+, CEH etc.)
Experience with RMF process and requirements
Heavy Security Technical Implementation Guide (STIG) experience
Experience with Vulnerability Management (Nessus, NexPose, OpenVAS, etc)
Translating technical customer requirements into business process and tasking
Benefits
Comprehensive benefits package, including health, dental, and retirement plans.
Opportunities for professional development and career advancement.
Company
Cyber Defense Technologies
CDT is a Service Disabled Veteran Owned Small Business (SDVOSB) and cyber security firm that provides consulting and security services.
11-50 employees
Funding
Current Stage
Early StageLeadership Team
William Kimble
Co-Founder and Chief Executive Officer
James Wright
Co-Founder, President, and COO
Recent News
2022-07-07
Company data provided by crunchbase