Space Information Systems Security Engineer (ISSE)

In a world of possibilities, pursue one with endless opportunities. Imagine Next!

When it comes to what you want in your career, if you can imagine it, you can do it at Parsons.  Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace where you can be yourself. Where you can thrive. Where you can find your next, right now. We’ve got what you’re looking for.

Job Description:

Parsons is looking for an amazingly talented Space Information System Security Engineer to join our team! In this role you will get to support services to advanced customer mission systems throughout the full systems lifecycle.

What You'll Be Doing:

• Define system security requirements in coordination with security stakeholders including system engineers, program managers, security control assessors, and authorizing officials.

• Provide independent cybersecurity advice and guidance to government stakeholders.

• Review system engineering requests for change (RFCs) to determine potential cybersecurity implications 

• Develop or review system security designs and architectures and advise stakeholders on cybersecurity implications with the goal to manage risk.

• Support testing of systems during development, reaccreditation and provide evaluation to program stakeholders. 

• Review results from system security scans and advise system engineers on best methods to remediate findings.

• Advise security engineers on best methods to remediate vulnerability findings through security scanning and management tools (i.e. Nessus/ACAS, WebInspect, Splunk) 

• Support engineering analysis of alternatives, tradeoffs, and risk treatment decisions.

• Develop and/or review cybersecurity documentation in support of customer Risk Management Framework (RMF) process; in accordance with NIST SP 800-37 Rev 5.

• Coordinate RMF processing with program and developer staffs.

• Work with interdisciplinary teams to deliver trustworthy and secure systems.

What Required Skills You'll Bring:

• Active TS/SCI Clearance with CI Polygraph and ability to maintain one.

• 5 years minimum of system and/or security engineering work performed in support of U.S. Government customers subject to the Risk Management Framework (NIST 800-53) or Intelligence Community Directive (ICD) 503.

• ​​(ISC)2 Certified Information System Security Professional (CISSP) or Certified Cloud Security Professional (CCSP) certification OR ability to obtain within six months of hire.

• Review and development of RMF Assessment and Authorization (A&A) documentation, e.g. System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POAMs).

• Experience defining system security requirements in coordination with security stakeholders including system engineers, program managers, security control assessors, and authorizing officials 

• Strong initiative and communication skills.

• Experience implementing NIST SP 800-53 Revision 5 security requirements and NIST SP 800-53A security assessment procedures.

What Desired Skills You'll Bring:

• Cybersecurity work performed in support of mission-essential space/ground system acquisitions and implementations.

• Ability to explain complex cybersecurity issues to a diverse audience in layman's terms

• Experience with the cyber security of SIGINT solutions.

• Experience implementing or assessing cybersecurity solutions using technologies such as:

  • Nessus, WebInspect, Splunk, Open SCAP

  • Microsoft Windows Server Active Directory

  • RedHat Linux

  • Virtualization Platforms: Hyper-V, VMware

  • Real Time Operating Systems (RTOS) (i.e. QNX, VxWorks)

  • VDI (Desktop), Citrix

  • Experience securing cloud-hosted assets in AWS/Azure/etc.

• Network engineering/design of LANs, WANs, MANs, including underlying routing protocols, and implementation. (TCP/IP, BGP, OSPF)

• Experience presenting verbal/written communications to Senior leadership including ISSMs, ISOs, security directors

• Experience with systems engineering  lifecycle processes

• Act as an advisor to the Government ISSM on ATO extensions, body of evidence reviews

• Experience guiding systems through the approval process per NIST-800-37  RMF

• Familiarity with Cross Domain Solutions (CDSs) 

• Familiarity with high assurance space-ground cryptographic solutions 

• Although not explicitly required, successful candidates typically have a B.S. or M.S. d