Lead Information Systems Security Engineer (ISSE) - TS/SCI with Polygraph

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Top Secret SCI + Polygraph

Clearance Level Must Be Able to Obtain:

Top Secret SCI + Polygraph

Public Trust/Other Required:

None

Job Family:

Information Security

Job Qualifications:

Skills:

Continuous Monitoring, Information Security, Risk Management Framework

Certifications:

None

Experience:

8 + years of related experience

US Citizenship Required:

Yes

Job Description:

We are seeking an experienced Information Systems Security Engineer (ISSE) to lead Assessment and Authorization (A&A) and Continuous Monitoring (ConMon) activities, ensuring compliance with Risk Management Framework (RMF) requirements across multi-level classification environments with diverse technologies.

Key Responsibilities

The lead ISSE will play a critical role in managing and coordinating system security personnel and actions by defining, tracking and executing RMF actions in accordance with ICD 503 (NIST 800-53) to obtain and sustain system authorizations. In addition to performing direct support of those cybersecurity actions and tasks, the Lead ISSE will also be responsible for providing supervisory coverage for a team of 6 or more direct report ISSEs.

Supervisory tasks include

• Defining and coordinating strategy on team operations to meet/exceed contract-driven security goals.
• Assigning, tracking and providing direction for system support and daily tasks
• Offering subject matter expertise as a resource to the team in support assigned task completion.

Responsibilities include

Assessment & Authorization (A&A):

• Oversee team preparation and submission of Interim Authorization to Test (IATT) and Authority to Operate (ATO) requests as well as directly conducting same
• Ensure development, accuracy, maintenance, and coordination of all required Body of Evidence (BoE) documentation for assigned and team system assets
• Collaborate across Technical Services and Security Services teams, as well as customer agency stakeholders, to ensure compliance
• Track and oversee workflow for lien remediation/resolution activities and entering tracking tool updates
• Evaluate system change requests and assessing both system and organizational risks associated with modifications

Continuous Monitoring (ConMon):

• Conduct, oversee and track execution of ConMon activities within established timelines, including BoE collection and tracking tool updates
• Conduct and oversee recurring reviews of system state and security posture to ensure that systems meet security requirements and are compliant with defined security policies and procedures.
• Provide recommendations for security control implementation and identifying necessary countermeasures or mitigating controls
• Respond to and oversee / coordinate responses to queries and requests for security information and reports

Incident Response & Security Oversight:

• Support and coordinate investigations of security incidents and reporting findings as necessary
• Guide and coordinate the communication, implementation and enforcement of security policies and plans for data, applications, hardware, and telecommunications systems
• Advise stakeholders on information assurance standards, dependencies, and emerging security technologies
• Oversee ongoing engagement with Enterprise Security Services tools (e.g., Trellix, ACAS, Splunk) to track and remediate vulnerabilities and compliance deficiencies

The Lead ISSE management responsibilities also include the following activities:

• Drive continuous improvement of ISSE team capabilities to enhance performance and compliance levels over time.
• Lead and contribute direct support to various processes, reporting, and planning for both internal and customer-facing activities.
• Ensure consistency of implementation for consistent RMF/A&A asset management and compliance.
• Create and implement quality management through best practices and efficiencies within the ISSE team, enabling the ability to manage workflows, define priority areas, and view trends.

Required Qualifications

• Education: Bachelor’s degree in Information Systems, Cybersecurity, or a related field (or equivalent experience)
• Experience: Minimum of 6