Information System Security Engineer

• Ten (10) years of experience or more assessing and documenting results for system(s), infrastructure(s) and applications (on-premises and cloud (i.e., AWS GovCloud and/or Azure GovCloud)) against NIST SP 800-53 security controls and SP 800-171 Risk Management Framework (RMF) processes.
• Bachelor of Science (B.S.) Degree in Computer Security or related field of study; (ISC)2 Information Security Certification(s) (e.g., CISSP, CAP, etc.); or in lieu of education, an additional five (5) years of relevant experience that addresses all requirements of the position.
• Requires an Active Top Secret clearance and the ability to obtain an CI polygraph

• Experience working on an Agile team
• Experience working with a federal law enforcement organization
• Willingness to implement Lean principles, Agile engineering and DevSecOps
• Desire longevity on the project.
• Technical background desired, knowledge broader in scope.
• Have an understanding of taclans, basic coding, and scripts.
• Splunk and Tenable experience desired.
• Need to be able to read technical diagrams, dataflows, create workflows, read network diagrams. Understand JRC and the 6 steps of the Risk Management Framework.
• Have a team perspective, invite collaboration, the personality needs to be one of investment. Need to connect and to learn. Be function driven. They need to have an accountability to the program, be on time, personable, positive

• Experience in a cyber-risk and compliance management system (e.g., Xacta, RiskVision, etc.).
• One (1) year experience or more configuring, performing, scheduling, reviewing, and assessing vulnerability (i.e., patches, updates, etc.) and compliance (i.e., Security Content Automation Protocol (SCAP) and/or Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG)) scans on the infrastructure and applications to ensure patch and configuration compliance on-premises and in the cloud (Azure preferred).
• Technical background that will assist in assessing the NIST SP 800-53 security controls and gather evidence to support conclusions.
• Knowledge of operating systems, network and application security to aid implementation of information security and assurance principles.
• Knowledge of SPLUNK software and tools.
• Knowledge of Taclane, encryption devices and COMSEC technology.  

Benefits 

·        Generous cost sharing for medical insurance for the employee and dependents 

·        100% company paid dental insurance for employees and dependents 

·        100% company paid long-term and short term disability insurance 

·        100% company paid vision insurance for employees and dependents 

·        401k plan with generous match and 100% immediate vesting 

·        Competitive Pay 

·        Generous paid leave and holiday package 

·        Tuition and training reimbursement 

·        Life and AD&D Insurance