Senior Information Systems Security Engineer

In a world of possibilities, pursue one with endless opportunities. Imagine Next!

When it comes to what you want in your career, if you can imagine it, you can do it at Parsons.  Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace where you can be yourself. Where you can thrive. Where you can find your next, right now. We’ve got what you’re looking for.

Job Description:

Parsons is seeking a skilled Sr. Information Systems Security Engineer (ISSE) to enhance our dynamic team. In this pivotal role, you will concentrate on integrating cybersecurity measures into system design, aiming to effectively manage cyber disruptions, reduce vulnerabilities, and ensure system integrity. Your responsibilities will include developing strategies to minimize misuse and malicious activities, assisting in the system accreditation process, and supporting Defensive Cyber Operations. Join us and contribute to safeguarding our digital infrastructure.

What You'll Be Doing:

• Collaborates with customers and interdisciplinary SAFe® Agile engineering teams to assess operational demands, break down requirements, and formulate cybersecurity functional requirements; supports agile development to enhance security posture, focusing on mission compliance within a SAFe® framework.
• Coordinate with various agile teams to ensure that appropriate security requirements are met for both cloud and on-premises environments and validate security solutions.
• Collaborate closely with Software Developers, System Designers, Operators, and industry partners to integrate security into products, develop new standards, and identify requirement gaps, aiming to achieve a strategically robust long-term system configuration.
• Provide system security engineering in alignment with the processes, tasks, and activities outlined in DOD Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT).
• Review program requirements, deliverables, and activities to assess the adequacy of information security architecture, identify necessary risk reduction measures, and define operational monitoring and defensive capabilities.
• Implement cybersecurity and DoD RMF activities to incorporate required security capabilities across both cloud and on-premises deployments.
• Design and execute risk assessments to verify that security capabilities are implemented correctly and provide sufficient resilience against anticipated threats.
• Strong ability to produce and maintain varied technical documentation.

What Required Skills You'll Bring:

• Active Top-Secret Clearance with SCI eligibility
• BS degree in Cybersecurity/Computer Science/Engineering or other relevant field from an accredited university with minimum 5 years of experience.
• MS degree in Cybersecurity/Computer Science/Engineering or other relevant field from an accredited university with minimum 3 years of experience.
• Must have IAT Level III or IAM Level III certification. DoD 8570.01/8140.03 Certification: CISSP, CISA, CISM, CASP+.
• Conducts vulnerability assessments of systems and application using Assured Compliance Assessment Solution (ACAS).
• Evaluating the effectiveness of methods used to safeguard systems, devices, procedures, and information.
• Develop Security Test and Evaluation (ST&E) control validation procedures, execute ST&E, and document results.
• Develop documentation, policies, and procedures; manage Ports, Protocols, and Services (PPSM); create system and network diagrams and descriptions; review past certification and accreditation documents; compile and generate RMF artifacts, including Security Test and Evaluation (ST&E) results.
• Possess hands-on experience with secure configuration management techniques, such as Security Technical Implementation Guides (STIGs).

What Desired Skills You'll Bring:

• Experience implementing or assessing cybersecurity solutions using technologies such as:
  • Nessus, Open SCAP, SCAP or other auditing tools
  • Splunk/ELK or other SIEM monitoring tools.
  • Microsoft Windows Server Active Directory
  • RedHat Linux/OpenShift/Ansible
  • Virtualization Platforms: Hyper-V, VMware
  • Containerization/Kubernetes
  • Familiarity or experience working with AWS/AZURE.

• ​Experience presenting verbal/written communications to Senior leadership including ISSMs, ISOs, security directors.
• Act as an advisor to the Government ISSM on ATO extensions, body