Information System Security Engineer - Washington, United States - H2 Performance Consulting
Description
Washington, District of Columbia, United States
H2 Performance Consulting is subject to the Vietnam Era Veteran's Readjustment Assistance Act as a Federal Contractor and is an Equal Opportunity/Affirmative Action Employer and strives to build a diverse workforce.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status.
Additionally, as mandated under Executive order 12989, H2 is required to verify employment eligibility of selected candidates through the Department of Labor's - E-Verify.
H2 Performance Consulting (H2) is seeking an Information Systems Security Engineer (ISSE).The ISSE will be responsible for the completion of Risk Management Framework (RMF) Assessment & Authorization (A&A) requirements and implementation supporting the PEO Digital ONE-NET Program.
The ISSEresponsibilities will include:
Work closely with the ONE-NET engineering team to execute the Risk Management Framework (RMF) process.
Responsible for developing and maintaining the cybersecurity architecture of a system.
Develop artifacts, perform control assessments and security testing to obtain / maintain authorizations through the system's lifecycle in alignment with the RMF Process Guide.
Responsible for maintaining and executing functions which includes, but not limited, to ACAS scans and analysis, STIG Validation in support of DISA, DoD and DON guidelines and proactive vulnerability detection.
Responsible for composing essential documentation (procedures, compliance and remediation reports, continuous monitoring, etc.), and providing mitigation statements in accordance with the Security Control Assessor (SCA) Risk Assessment Guide.
Communicate security requirements and assessment results to both Program Managers and Engineers.Create technically sound and actionable reports and remediation plans.
Qualifications and Education Requirements:
Secret Clearance required.
Bachelor's Degree with 3+ Years of Cybersecurity Experience or 6+ years of relevant experience in lieu of degree
IAM Level II certification required and must obtain IAM Level III certification within 12 months of employment
Industry certification in an relevant operating system (Cisco, Windows, RedHat etc.) must or obtain certification within 3 months of employment
Demonstrated knowledge of Systems Administration/Engineering with proficiency in analyzing systems designs with a systems security mindset
Strong knowledge of threats and vulnerabilities associated with network security and Computer Network Defense
Strong oral and written communications skills
Strong analytical and problem-solving skills
Experienced with Vulnerability Management
tools such as ACAS, SCAP, STIG Viewer, eMASTER, and EvaluateSTIG and working in eMASS.
Familiarity with DoD, DON, and other Cyber Security Regulatory Compliance bodies
Qualified candidates may submit their resume to the career section of our company website at
. All resumes will be reviewed within 5 business days and those candidates we wish to further in the application process will be contacted via email/phone to schedule initial phone screens.
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.