Information System Security Engineer - Fort Belvoir, United States - LMI

LMI Fort Belvoir, United States

4 weeks ago

Technology / Internet

Description

Overview

Army Data and Analytics Platforms (ARDAP) is seeking a Cybersecurity Information Systems Security Engineer (ISSE) to join a team supporting data and analytics platforms for the US Army. The Cybersecurity ISSE will work with a team of cyber, technical, and program subject matter experts to capture and refine information security requirements and ensure their integration into information technology component products and information systems through purposeful security design or configuration. for all programs under the ARDAP Assessment and Authorization (A&A) portfolio. The ISSE will provide subject matter expertise (SME) in the continued research, testing, training, implementation, and continuous monitoring of these enterprise solutions. Work location is client site, Fort Belvoir, VA. Candidates should expect to work at the client site approximately 1 day per week.

Responsibilities

Define system security requirements in coordination with security stakeholders including system engineers, program managers, security control assessors, and authorizing officials.
Ensure cybersecurity requirements are identified, allocated, implemented, verified, and continuously monitored throughout the system life cycle.
Perform Assessment and Authorization (A&A) cybersecurity reviews, identify gaps, and support risk management plans for cybersecurity personnel to execute.
Support the Risk Management Framework (RMF) process for each product in the portfolio.
Provide SME level cybersecurity engineering support and input to product leads and cybersecurity teams to produce authority to operate (ATO) packages and successfully achieve ATOs.
Support interim authority to test (IATT), risk assessment /acceptance, and all other ATO related activities.
Interpret security control noncompliance to determine the impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program.
Work with product teams to identify controls, develop appropriate mitigations, and develop and track Program of Action and Milestone (POAM) documents to ensure that ATO packages are technically sound before submission to the program cyber staff for review.
Track audit findings and recommendations to ensure that appropriate mitigation actions are taken.
Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).
Provide independent cybersecurity advice and guidance to government stakeholders and contractor team members.
Participate in recurring cybersecurity working group meetings.
Develop or review system security designs and architectures.
Advise system engineers on the best methods to remediate vulnerability findings through the use of security scanning tools and DoD / Industry best practices.
Support cybersecurity engineering analysis of alternatives, tradeoffs, and risk treatment decisions.
Develop cybersecurity documentation in support of customer Risk Management Framework (RMF) process; in accordance with NIST SP Rev 2.
Work with interdisciplinary teams to deliver trustworthy and secure systems.

Qualifications

Required:

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field
5 years minimum of system and/or security engineering work performed in support of U.S. Government customers
Experience reviewing and developing of RMF Assessment and Authorization (A&A) documentation, e.g., System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POAMs)
Experience implementing DoDI Risk Management Framework for DoD
DoD 8570 IASAE Level II baseline certification (CISSP, CCSP, etc.)
Must possess and maintain a Secret Security Clearance

Desired:

Experience implementing NIST SP Revision 4 security requirements and NIST SP 800-53A security assessment procedures.
Knowledge of Cloud (i.e., Azure, Amazon C2S, Commercial and GovCloud) security planning, design, and operations.
Ability to explain complex cybersecurity issues to a diverse audience in layman's terms.
Experience implementing or assessing cybersecurity solutions using technologies such as:
- Nessus, WebInspect, Splunk, Open SCAP
- Microsoft Windows, Server, Active Directory
- RedHat Linux; CentOS,
- Virtualization Platforms: Hyper-V, VMware
- VDI (Desktop), Citrix
Network engineering/design of LANs, WANs, MANs, including underlying routing protocols, and implementation. (TCP/IP, BGP, OSPF)
Knowledge of Cross Domain Solutions (CDS).
Experience presenting verbal/written communications to Senior leadership including – Information Systems Security Engineer (ISSM), System Owners, Authorizing officials, and security leads.
Experience with systems engineering lifecycle processes.
Proven ability to balance priorities in a dynamic, mission-oriented environment.
Experience with agile frameworks and Continuous Integration/Continuous Delivery (CI/CD) frameworks such as DevOps or DevSecOps.
Experience with cloud cybersecurity implementations.
Familiarity with Army NETCOM RMF review processes (RMF 2.0).
Experience with Continuous Monitoring and Continuous Monitoring Risk Scoring (CMRS)
DoD 8570 IASAE Level III certification, such CISSP-ISSAP or CISSP-ISSEP or ability to be certified at level III within 6 months of start.

Network Security Engineer Lead

3 weeks ago

Chenega MIOS SBU Fort Belvoir, United States

Network Security Engineer Lead · Ft. Belvoir, VA Join our Talent Network · Network Security Engineer Lead · Ft. Belvoir, VA C-CHR · TheNetwork Security Engineer Leadwill perform a variety of broad network engineering tasks focused on the design, implementation, testing, and tr ...
Information Systems Security Engineer

3 weeks ago

Booz Allen Hamilton Fort Belvoir, United States Full time

Job Number: R0195741 · Information Systems Security EngineerThe Opportunity: · Everyone knows security needs to be "baked in" to a system architecture—you actually know how to bake it in. You can identify and implement ways to harden systems and reduce their attack surface. What ...
Information System Security Engineer

3 weeks ago

LMI Fort Belvoir, United States

Overview · The Information System Security Engineer will identify and help to eliminate vulnerabilities and risk factors in information systems; stay up to date on the latest innovation in cybersecurity; study trends in cyber around threat actors' behaviors, tactics, and goals; a ...
Cyber Security Engineer/ ISSO

6 days ago

VAE, Inc. Fort Belvoir, United States

· OVERVIEW: VAE, Inc. is a full service IT Infrastructure Solutions Company focused on building, securing and supporting our clients' mission critical enterprises. We provide a distinctive array of design, integration and implementation services as well as fully managed service ...
Cyber Security Engineer/ ISSO

2 weeks ago

VAE, Inc. Fort Belvoir, United States

· OVERVIEW: VAE, Inc. is a full service IT Infrastructure Solutions Company focused on building, securing and supporting our clients' mission critical enterprises. We provide a distinctive array of design, integration and implementation services as well as fully managed service ...
Cyber Security Engineer/ ISSO

2 weeks ago

VAE, Inc. Fort Belvoir, United States

· OVERVIEW: VAE, Inc. is a full service IT Infrastructure Solutions Company focused on building, securing and supporting our clients' mission critical enterprises. We provide a distinctive array of design, integration and implementation services as well as fully managed service ...
Cyber Security Engineer/ ISSO

1 week ago

VAE, Inc. Fort Belvoir, United States

· OVERVIEW: VAE, Inc. is a full service IT Infrastructure Solutions Company focused on building, securing and supporting our clients' mission critical enterprises. We provide a distinctive array of design, integration and implementation services as well as fully managed service ...
Security Engineer

4 weeks ago

Gray Tier Technologies LLC Springfield, United States

| Skills & Tasks | | | | - Bridge the gap between high-level security policies/requirements and | | technical/operational implementation of those requirements. | | - Apply Risk Management Framework (RMF) security controls in | | accordance with regulatory policies. | | - Serve as ...
IT Security Engineer

1 day ago

UPSLOPE ADVISORS, INC Springfield, United States

Job Description · Job DescriptionSalary: · UpSlope Advisors is seeking a qualified Security Engineer to join an exciting program in Springfield, Virginia. This individual will be responsible for providing systems security support for the protection of information system assets. ...
Security Engineer

3 weeks ago

SAIC Springfield, United States

· SAIC is looking for a qualified Security Engineer to join an exciting program in Springfield, Virginia. Individual will · be responsible for providing systems security support for the protection of information system assets. Responsibilities · include: · - Provide ongoing s ...
Security Engineer with Security Clearance

2 days ago

SAIC Springfield, United States

You will need to login · before you can apply for a job. · Security Engineer with Security Clearance · Description SAIC is looking for a qualified Security Engineer to join an exciting program in Springfield, Virginia. Individual will be responsible for providing systems securi ...
Systems Security Engineer

3 weeks ago

MAXISIQ, Inc. Lorton, United States

Job Description · Job DescriptionJob Description · Salary Range: 125K-145K · MAXISIQ is seeking a System Security Engineer, who enjoys security work and possesses both deep and wide expertise in the security space. You will work as part of dynamic team keeping computer systems an ...
Systems Security Engineer

5 days ago

MAXISIQ, Inc. Lorton, United States

Job Description · Maximise your chances of a successful application to this job by ensuring your CV and skills are a good match. · Salary Range: 125K-145K · MAXISIQ is seeking a System Security Engineer, who enjoys security work and possesses both deep and wide expertise in the ...
Application Security Engineer

3 weeks ago

BusPatrol Lorton, United States

Overview: · Location: Remote (must be based in the US or Canada) · Travel: Less than 5% · Manages Others: No · Education: BS in Computer Science or equivalent experience · Experience: 3-5 years of software development experience, 2+ of those in application security preferred ...
Endpoint Security Engineers

1 week ago

CACI International Springfield, United States

Endpoint Security Engineers (Levels 1, 2, 3) · Job Category: Engineering · Time Type: Full time · Minimum Clearance Required to Start: TS/SCI · Employee Type: Regular · Percentage of Travel Required: Up to 10% · Type of Travel: Local · Are you passionate about working with leadin ...
Network Security Engineer

2 days ago

V2X Springfield, United States

The Network Security Engineer is responsible for analyzing network architecture and providing solutions to enhance security. A valid security clearance is required. · Perform WAN utilization analysis and generate reports · Examine application flows and analyze findings with reg ...
Network Security Engineer

2 days ago

Twinn Intelligence Group Springfield, United States

Twinn is seeking a Network Engineer with a security background to come join their team. · TS/SCI with TOP Poly · REQUIRED SKILLS AND DEMONSTRATED EXPERIENCE · Demonstrated experience with multiple types of Cisco products, such as Nexus switches, ISR routers, Firepower firewalls. ...
Network Security Engineer

2 weeks ago

Twinn Intelligence Group Springfield, United States

Twinn is seeking a Network Engineer with a security background to come join their team. · TS/SCI with TOP Poly · REQUIRED SKILLS AND DEMONSTRATED EXPERIENCE · • Demonstrated experience with multiple types of Cisco products, such as Nexus switches, ISR routers, Firepower firewa ...
Security Engineer

4 weeks ago

E-INFOSOL Washington, United States

E-INFOSOL LLC is seeking a highly motivated Security Engineer to be a Full-time employee in Washington, DC. Come join a team that collaborates across the entire organization to bring the right solution to our customers and drive innovation. · Job Description: · The Security Engin ...
Cyber Security Engineer

5 days ago

ASRC Federal Alexandria, United States Full time

Job Description · NetCentric Technology is seeking an Cyber Security Engineer - ACAS to support our Cybersecurity Support Services (CSSS) contract with the Defense Manpower Data Center (DMDC). · The successful candidate will have experience in Information Technology systems co ...