Information System Security Engineer (ISSE)-Level 3, OS&CI Job #447

Cybersecurity Engineer

Position Overview

• Location Type: Onsite
• Job Type: Full-time
• Salary: Not specified
• Clearance Required: TS/SCI with Current CI Poly
• Minimum Years Experience: 5 years

This role involves ensuring cybersecurity requirements are met throughout the system lifecycle, working with various stakeholders to achieve Authority to Operate (ATOs) and providing independent cybersecurity advice.

Requirements

• Clearance: TS/SCI with Current CI Poly
• Certification: (ISC)2 Certified Information System Security Professional (CISSP) or Certified Cloud Security Professional (CCSP)
• Experience: Minimum 5 years of system and/or security engineering work performed in support of U.S. Government customers subject to Intelligence Community Directive (ICD) 503.
• RMF Experience: Review and development of RMF Assessment and Authorization (A&A) documentation, e.g., System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POAMs).
• Skills: Strong initiative and communication skills.

Responsibilities

• Define system security requirements in coordination with security stakeholders.
• Ensure cybersecurity requirements are identified, allocated, implemented, verified, and continuously monitored throughout the system lifecycle.
• Coordinate RMF processing with program, developer, and authorizing stakeholders to achieve ATOs.
• Provide independent cybersecurity advice and guidance to government stakeholders.
• Develop or review system security designs and architectures.
• Advise system engineers on remediating vulnerability findings using security scanning tools.
• Support engineering analysis of alternatives, tradeoffs, and risk treatment decisions.
• Develop cybersecurity documentation in support of the customer Risk Management Framework (RMF) process, in accordance with NIST SP 800-37 Rev 2.
• Work with interdisciplinary teams to deliver trustworthy and secure systems.

Desired Skills

• Experience implementing NIST SP 800-53 Revision 4 security requirements and NIST SP 800-53A security assessment procedures.
• Knowledge of Cloud (i.e., Azure, Amazon C2S, Commercial and GovCloud) security planning, design, and operations.
• Ability to explain complex cybersecurity issues to a diverse audience in layman’s terms.
• Engineering work performed in national security mission environments.
• Experience implementing or assessing cybersecurity solutions using technologies such as:
  • Nessus
  • WebInspect
  • Splunk
  • Open SCAP
  • Microsoft Windows, Server, Active Directory
  • RedHat Linux; CentOS
  • Virtualization Platforms: Hyper-V, VMware
  • VDI (Desktop), Citrix
  • Network engineering/design of LANs, WANs, MANs, including underlying routing protocols, and implementation. (TCP/IP, BGP, OSPF)

Company Information

• Location: Aurora, CO - 100% onsite