Information Systems Security Engineer, Senior

About SITEC

SITEC is an employee and customer focused Information Technology and Professional Services Firm specializing in design, development, and delivery of state-of-the-art technology solutions, as well as cybersecurity, software and systems engineering services. SITEC provides support services as required for continuous operation of the Software Support Activity Software Production Facilities including complete lifecycle services for our customers platforms.

The pay for this position is competitive and commensurate with experience. Embrace this opportunity to showcase your expertise and contribute to our innovative projects. You will be given the opportunity to utilize great benefits such as Medical, Dental, Vision, 401(k), Life Insurance, Health Savings Account, Flexible Spending Account, Competitive Salary, and Paid Time Off. Are you ready to take the next step in your career with us? Apply now!

WHAT DOES AN INFORMATION SYSTEMS SECURITY ENGINEER (ISSE) DO?

Augment a well-established team as an information systems security engineer (ISSE). This is a collaborative team environment that entails frequent interaction with customers. This is a fast-paced team so a willingness to take on challenges to creatively solve customer requirement problems will be required. The successful candidate for an information systems security engineer (ISSE) will be self-motivated and will support new development work as well as sustainment activities. The ISSE will participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of secure networking, computing, and enclave environments.

Embrace the opportunity to showcase your information systems security engineer (ISSE) expertise and contribute to impactful projects with a forward-thinking team!

Would you be a great INFORMATION SYSTEMS SECURITY ENGINEER (ISSE)?

Twenty (20) years' experience as an ISSE on programs and contracts of similar scope, type, and complexity is required. In addition, the Information Systems Security Engineer shall participate in system architectures in support of a global effort to ensure mission systems remain resilient in case of degraded infrastructure. An Information Systems Security Engineering (ISSE) is required to perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations and recommend mitigation strategies. The ISSE will validate and verify system security requirements definitions and analysis and establish system security designs in support of the engineering team.

The ISSE will: design, develop, implement and/or integrate IAT and security systems and system components including those for networking, computing, and enclave (physical and virtual) environments to include those with multiple enclaves (to include multi-tenant) and with differing data protection/classification requirements (to include Cross Domain Solutions - CDS).

The ISSE will apply system security engineering expertise in one or more of the following to: system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf(COTS); and government off-the-shelf cryptography identification(GOTS); authentication and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing.

Furthermore, the information systems engineer (ISSE) will perform system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements and recommend system-level solutions to resolve security requirements.

Requirements

• Active Top Secret//SCI with poly required at time of application.
• Twenty (20) years' experience as an ISSE on programs and contracts of similar scope, type, and complexity is required.
• Bachelor's degree from an accredited college or university in Computer Science, Information Assurance, Information Security System Engineering or related discipline
• Four (4) years of additional ISSE experience may be substituted for a bachelor's degree
• Master's degree in computer science, Information Assurance, Information Security System Engineering, or related discipline may be substituted for two (2) years of experience, reducing the requirement to eighteen (18) years of experience.
• Support security authorization activities in compliance with NSA/CSS information System Certification and Accreditation Process (NISCAP) and DoD Risk Management Framework (RMF), the NIST Risk Management Framework (RMF) process, and prescribed NSA/CSS business processes for security engineering.
• The ISSE will build/enhance IA into systems deployed to operational environments.
• The ISSE will assist architects, engineers and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Agency security policy and enterprise solutions.
• The ISSE will support the building and review of security architectures.
• The ISSE will enforce the design and implementation of trusted relations among external systems and architectures.
• The ISSE will assess and mitigate system security threats/risks throughout the program life cycle.
• The ISSE will contribute to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking design, testing, fielding and operation.
• The ISSE will review certification and accreditation (C&A) documentation, provide feedback on completeness and compliance of its content and recommend changes where needed.

Certifications

• Information Systems Security Engineering Professional (ISSEP)
• CISSP Certifications are required.

Tech Stack

• CISSP experience
• Experience with Risk Management Framework (RMF)
• Experience with NISCAP
• Understand the process of information Assurance Vulnerability Management
• Commercial off-the-shelf (COTS)
• Government off-the-shelf cryptography identification (GOTS)

Join our team today!

We believe in taking care of our team, both on and off the job. That's why we offer a mobile-friendly application process - because we know your time is valuable. If you're ready to take your skills to the next level and join a team that values hard work and good times, complete our application today!