Information System Security Engineer (Onsite)

Date Posted:

2024-05-29

Country:

United States of America

Location:

PW100: East Hartford 400 Main Street, East Hartford, CT, 06118 USA

Position Role Type:

Onsite

Come ready to explore and you’ll find a place where your talent takes flight—beyond the borders of title, a country or your comfort zone. Bring your passion and commitment and we’ll welcome you into a tight-knit team that takes our mission personally. Channel your drive to make a difference into shaping an organization and an industry that’s evolving fast to the future.

Innovation through diversity of thought. At Pratt & Whitney, we believe diversity of thought enables creativity, innovation, and a foundation for inclusion. By fostering an inclusive culture, we accept a shared accountability and responsibility to recognize, sponsor, coach, hire and promote talent equally. We welcome our employees to be their whole - best - selves at work because trust, respect and integrity, are a part of our DNA.

At Pratt & Whitney, the difference you make is on display every day. Just look up. Are you ready to go beyond?

What You Will Do:

The Information Systems Security Engineer (ISSE) will function as a Subject Matter Expert (SME) for information systems security control methods, mitigations, and tools throughout a systems’ lifecycle in compliance with U.S. Department of Defense (DoD) security laws, regulations and guidelines.  The ISSE will participate in projects, guide and counsel internal customers, assist in developing and maintaining cross-security enclave processes and standards, and provide training and guidance on tools and methods to other members of the cybersecurity team.

• Under the direction of the Enclave Senior Manager, serve as an information systems security lead for information technology-related projects supporting the Military Engines portfolio of programs.  Ensure delivery of required Risk Management Framework (RMF) artifact elements for new information systems are compiled and provided to the respective ISSM for inclusion in RMF packages to be submitted for an Authority to Operate (ATO). 
• Influence and guide team project teams architecting and designing information systems solutions in the employment of configuration options, processes and tools that align with applicable DoD policies and regulations.  Collaborate with system engineers, developers, and system administrators to resolve compliance issues through mitigation and remediation plans.
• Develop, assess, verify, and manage the implementation of information system security-related tools, measures, and controls in compliance with applicable DoD and Corporate policies, standards, and procedures.  Periodically review existing systems for opportunities to reduce effort, risk and/or mistake-proof methods and procedures through process improvement.
• Lead the effort in closing out POA&M items for Enclave information systems that are associated with technology-related control items. 
• Assist the Enclave Senior Manager in developing and reviewing polices, plans, procedures, and standard work related to information systems security measures and configurations in accordance with applicable DoD policies and regulations tied to the Risk Management Framework (RMF).
• Assist in overseeing and managing the patch management process and execution across all security enclaves.  Collaborate with peer ISSEs and Corporate equivalents for alignment and sharing of best practices.
• Partner with other ISSEs in participating and supporting the threat intelligence program.  Collaborate with ISSE peers, Corporate equivalents and the Insider Threat Program Security Officer (ITPSO) for alignment and sharing of best practices. 
• In collaboration with the incident response manager, coordinate and/or perform incident response containment, eradication, and recovery tasks involving classified systems and/or spills of classified data to unauthorized systems.
• Support the respective security enclaves in information systems security-related inspection preparations as needed.
• In close collaboration with peer ISSEs, assist in developing and maintaining standards for information security methods and tools.  Work with the Enclave Senior Manager and Associate Direct of Cybersecurity in authoring and maintaining associated training content.

Qualifications You Must Have:

• Bachelors Degree in engineering, cybersecurity, computer science, or IT-related field of study, or equivalent experience and minimum 8 years prior relevant experience, or An Advanced Degree in a related field and minimum 5 years experience.
• U.S. citizenship is required, as only U.S. citizens are authorized to access information under this program/contract.
• Current Secret-level U.S. government security clearance with ability to obtain a Top Secre