Information System Security Engineer (ISSE) **

Location: Dam Neck, Virginia
Telework: Hybrid Telework (minimum 2 -3 days in office per week)
Clearance: Active Secret Required (US Citizenship Required) 
Experience: Mid-Level
Number of Openings: 1
Funding Status: Future Funded
Salary Range: $80,000 - $100,000 (Please see below for more info on salary) 

Information System Security Engineer (ISSE)

SimVentions is a 100% employee-owned business and has consistently been voted one of Virginia's Best Places to Work. We are looking for talented Information System Security Engineers (ISSE) to join our team! In this role you will ensure cybersecurity requirements are identified, allocated, implemented, and verified in support of system accreditations and provide continuous monitoring throughout the system lifecycle.

Responsibilities: 

• Provide cybersecurity support as an Information System Security Engineer (ISSE) and assist the Information System Security Officer (ISSO)/Information System Security Manager (ISSM) in executing their duties and responsibilities
• Support the development, management, and maintenance of cybersecurity solutions (e.g. Host Based Security System (HBSS), Assured Compliance Assessment Solution (ACAS), Vulnerability Remediation Asset Manager (VRAM), Public Key Infrastructure/Enabling (PKI/PKE), Security Information and Event Management (SIEM), Anti-virus, Data-at-Rest Encryption)
• Develop, review, and provide inputs to and comments on systems acquisition, engineering, and cyber-related documentation
• Research cybersecurity topics relevant to the system and provide assessments on modifications to Department of Defense (DoD)/Department of Navy (DON) cybersecurity policy requirements to determine impacts to systems and platform cybersecurity posture
• Ensure that the information system(s) adheres to DoD, DON, and NAVSEA cybersecurity policies
• Develop Risk Management Framework (RMF) artifacts in support of Assessment and Authorization (A&A) efforts Research, recommend, and provide technical input on security solutions in accordance with DoD/DON policies and operational requirements
• Evaluate proposed system changes to determine significant impacts to security posture (e.g. introduction of new vulnerabilities, mitigation/remediation of existing risks), provide recommendations, and support the integration, installation, and testing of changes approved via the Configuration Management (CM) process
• Perform cybersecurity testing as required, to include vulnerability scanning (ACAS), implementation of Security Requirements Guides (SRG) and/or Security Technical Implementation Guides (STIG), and Security Content Automation Protocol (SCAP) benchmarks
• Perform compliance and vulnerability assessments of information system(s) and identify deviations from DoD/DON policy

Requirements:

• Bachelors Degree in Computer Science or five (5) years of full-time professional experience in network computer
  equipment, system and security.
• Experience working with Department of Defense (DoD) Information Assurance (IA) mandatory policies standards, procedures, and policies.
• Mastery of IAT Level I and IAT Level II CE/NE knowledge and skills with a certification in Information Assurance standards and policies.
• Minimum of five (5) years’ experience in performing Risk Management Framework activities.
• Demonstrated experience with performing STIG assessments to include using SCAP benchmarks.
• Demonstrated experience performing vulnerability assessments with the Assured Compliance Assessment Solution tool.
• Demonstrated experience using eMASS.
• Experience in developing Plans of Actions and Milestones (POA&M) entries.
• Experience in completing Risk Management Framework Steps 1-6 in support of Assessment and Authorization (A&A) in the Information System Security Engineer (ISSE) capacity.
• Demonstrated experience in communicating risk reduction recommendations to stakeholders.

Education:  

• Bachelors Degree in Computer Science or five (5) years of full-time professional experience in network computer equipment, system and security.
• Mastery of IAT Level I and IAT Level II CE/NE knowledge and skills with a certification in Information Assurance standards and policies.

Clearance: A Secret Clearance is required for this position. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. US Citizenship is required to obtain a clearance.

Travel: Negligible