Information System Security Engineer (ISSE) - TS/SCI with Polygraph

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Top Secret SCI + Polygraph

Clearance Level Must Be Able to Obtain:

Top Secret SCI + Polygraph

Public Trust/Other Required:

None

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Amazon Web Services (AWS), Information Technology Security, Risk Management Framework

Certifications:

None

Experience:

10 + years of related experience

US Citizenship Required:

Yes

Job Description:

Seize your opportunity to make a personal impact as an Information System Security Engineer (ISSE). GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.

At GDIT, people are our differentiator. As an ISSE, you will help ensure today is safe and tomorrow is smarter. Our work depends on an ISSE joining our team.

The selected candidate will act as an Information System Security Engineer (ISSE) and should have a broad cybersecurity background with an emphasis on Assessment & Authorization (A&A). The program ISSE should have a working knowledge of AWS to include security groups, encryption, networking, compute, and storage. You will work with program management and developers to ensure security is implemented in the early stages of all systems. The selected candidate will be directly involved in fostering all efforts through the Risk Management Framework and achieving systems "Authority to Operate" (ATO).

WHAT YOU WILL BE DOING:

• Working collaboratively with other program security personnel as well as working independently
• Acting as the organization's liaison to the ISSM staff promoting security compliance and related security process improvements
• Working with Information Management Technical Officers and other external stakeholder orgs
• Coordinating and tracking risks, accreditation status, and reporting status across all project teams
• Providing team officers with security architecture guidance and engineering reviews
• Ensuring compliance with Sponsor auditing requirements
• Conducting security scanning, interpreting results, and working with team members to resolve issues
• Preparation, updating, and submission of security relevant artifacts to the Sponsor's security management system
• Completing necessary application security document requirements to include; CONOPS, SSPs, DR/BR Plans, BOEs, etc.
• Creating security briefings and supporting management in all security related matters
• Maintaining awareness of IT Security policies and practices

WHAT YOU’LL NEED TO SUCCEED:

• Education: BA/BS in Information Technology or related field or the equivalent combination of education, technical certifications or training, or work experience
• Experience: 10+ years
• Required Skills and Experience:
• Extensive knowledge of the sponsors the Risk Management Framework (RMF).
• Experience with system scanning tools, antivirus, siems, network monitoring tools, PKI
• Experience developing a Body of Evidence (BOE) for gaining and maintaining ATO
• Experience working with Sponsor security personnel to identify and resolve questions and POA&Ms;
• Experience tracking accreditations and gaining reaccreditations prior to expiration;
• Familiarity with Confluence, Jira, MS-Office Suite
• Security Clearance Level: Top Secret/SCI with Polygraph
• Desired Skills and Experience:
• Experience with Linux or Windows administration, any scripting language and/or automation (not mandatory)
• Experience with the Software Development Lifecycle (SDLC) and DevOps
• Excellent, briefing, writing, and presentation skills
• Security+, CISSP, CISM or other Security related certification
• Location: Herndon, VA and McLean, VA (On Customer Site)
• US Citizenship Required

<