Apply on Employer Site

StratasCorp Technologies · 2 months ago

Information System Security Engineer (ISSE) III - (STRTS6021.1)

Philadelphia (PNBC) - Philadelphia, PA US (Primary)

Full-time

Onsite

Senior Level

7+ years exp

StratasCorp Technologies is a leader in the Department of Defense Information Technology sector, committed to employee satisfaction and operational excellence. They are seeking an Information System Security Engineer (ISSE) III to assist in developing and maintaining Risk Management Framework (RMF) system security plans and provide cybersecurity support.

Cyber SecurityInformation TechnologyLogistics

Growth Opportunities

No H1B

Security Clearance Required

Responsibilities

Assessment & Authorization (A&A)

Cybersecurity Compliance and Audit Readiness

Information Assurance Vulnerability Management (IAVM)

Vulnerability Scanning and Remediation

Application and Implementation of Security Technical Implementation Guides (STIGs) and Security Requirements Guide (SRGs)

Execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO)

Identify and tailor IT and CS security control baselines based on RMF guidelines and categorization of the RMF boundary. Perform Ports, Protocols, and Services Management (PPSM). Perform IT and CS vulnerability-level risk assessments

Execute security control testing as required by a risk assessment or annual security review (ASR)

Mitigate and remediate IT and CS system level vulnerabilities for all assets within the boundary per STIG requirements

Develop and maintain Plans of Actions and Milestones (POA&M) in Enterprise Mission Assurance Support Service (eMASS)

Qualification

IAT-III certificationRisk Management Framework (RMF)Information Assurance Vulnerability ManagementVulnerability ScanningCybersecurity ComplianceAssessment & AuthorizationSecurity Technical Implementation GuidesPlans of ActionsMilestones

Required

Seven (7) years professional experience capturing and refining information security operational and security requirements, and ensuring those requirements are properly addressed through purposeful architecting, design, development, and configuration; and implementing security controls, configuration changes, software/hardware updates/patches, vulnerability scanning, and securing configurations

Bachelor's degree in computer science, information technology, or an equivalent technical degree from an accredited college or university

IAT-III certification (any of the following): CASP+ CE, CCNP Security, CISA, CISSP (or Associate), JGCED, GCIH, CCSP