LanceSoft, Inc. · 2 months ago
Information Security Systems Engineer
LanceSoft, Inc. is a company seeking an Information Security Systems Engineer to work with Encode, Inc. This role involves applying systems security engineering methods to ensure the security of systems and networks throughout their lifecycle, working closely with customers to define and implement security requirements.
Information Technology
Responsibilities
Lead the development and implementation of program protection throughout the System Development Lifecycle. Key tasks include
Assessing systems for Critical Program Information
Conducting trade studies
Developing program protection requirements
Implementing security architectures
Assessing threats via attack/countermeasure analysis
Conducting Verification and Validation activities
Serve as a SME in the area of program protection
Draft Program Protection Plans (PPPs), Cybersecurity Strategies, Security Classification Guides (SCGs), and Program Protection Plans
Interact with customer to define program protection requirements, solutions, trades, costs, implementation, system impacts, and effectiveness
Utilize Risk Management Framework (RMF) accreditation and authorization (A&A) processes to include RMF steps 1-4 (categorization, controls selection, control implementation, security assessment) and standard body of evidence (BoE) package development
A&A package processing
RMF accreditation of Platform IT (PIT) systems
NSA Type 1 Certification of cryptographic high assurance devices
Experience with NSA High Assurance products and IASRD and SERD requirements
Support security engineering activities, including basis of estimate development, requirements development, design, test, configuration management and maintenance of information systems and data
Assist program security in the development of policies and procedures for emerging security technologies
Support the evaluation, qualification, testing and delivery of security architecture improvement, obsolescence replacement and vulnerability response projects
Provide Security Testing and Verification
Work is to be accomplished 100% onsite, in a lab environment
Qualification
Required
Bachelor's Degree and a minimum of 12 years of prior relevant ISSE experience. Graduate Degree and a minimum of 10 years of prior related experience. In lieu of a degree, minimum of 16 years of prior related experience
Minimum of Collateral Secret security clearance required
Professional experience with RMF (Risk Management Framework) required
Must be able to obtain and maintain a DOD 8140 certification (or NIST 800-181), appropriate for the position within 6-months of start
Preferred
Experience in configuration and use of cyber defense and vulnerability assessment tools such as ACAS and SCC
Active TS/SCI Clearance is highly desired