Information Systems Security

Information Systems Security Cybersecurity Jobs

3 jobs found

Today

Information Systems Security Engineer

Base-2 Solutions United States

United States

Today

Full time Cyber Security Cybersecurity Tools Engineer

Apply Now

Job Description

Base-2 Solutions is seeking an Information Systems Security Engineer (ISSE) to help protect national defense and mission-critical systems.

Responsibilities

Develop, implement, and maintain security solutions for complex systems to support confidentiality, integrity, and availability.
Perform system security analysis, risk assessments, and vulnerability assessments to identify and reduce risk.
Support security architecture and system security engineering artifacts using NIST, DoD, and IC policies and guidelines.
Partner with system architects, software engineers, and network engineers to incorporate security requirements into system design.
Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), and related Risk Management Framework (RMF) documentation.
Conduct continuous monitoring and maintain compliance with security standards such as NIST SP 800-53, ICD 503, and CNSS.
Recommend improvements to system security posture and respond to security incidents as needed.
Support security testing, evaluation, and certification and accreditation (C&A) activities.
Interface with government customers and stakeholders to communicate technical information and security strategies.

Requirements

Experience with cybersecurity frameworks and standards including NIST SP 800-53, RMF, ICD 503, CNSS, and DoD STIGs.
Hands-on experience with security tools such as ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, and McAfee ePO.
Experience with security technologies including firewalls, IDS/IPS, SIEMs, VPNs, PKI, and multi-factor authentication.
Experience producing and maintaining system security documentation: SSPs, POA&Ms, SARs, and Security Control Traceability Matrix (SCTM).
Experience with Linux, Unix, Windows, and virtualization technologies such as VMware and Hyper-V.
Experience with cloud platforms (AWS, Azure, Google Cloud) with a focus on cloud security.
Knowledge of encryption protocols and technologies including TLS/SSL, IPsec, VPN, and PKI.
Experience with security testing tools such as Nmap, Metasploit, Burp Suite, and Kali Linux.
Scripting and automation experience with Python, PowerShell, and Bash.
Knowledge of SDLC, software assurance, and secure coding practices.
Experience collaborating with issue-tracking and documentation tools including JIRA, Confluence, and ServiceNow.
Active clearance: Top Secret/SCI with Full Scope Polygraph.
U.S. citizenship required: Yes.
Certifications: CISSP, CAP, CEH, Security+, AWS Security Specialty, or equivalent.

Technologies

ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, McAfee ePO
Firewalls, IDS/IPS, SIEMs, VPNs, PKI, Multi-Factor Authentication
System Security Plans (SSPs), Security Assessment Reports (SARs), Risk Management Framework (RMF) documentation
NIST SP 800-53, ICD 503, CNSS, NIST, DoD, IC, RMF, DoD STIGs
Nmap, Metasploit, Burp Suite, Kali Linux
Python, PowerShell, Bash
Linux, Unix, Windows, VMware, Hyper-V
AWS, Azure, Google Cloud
TLS/SSL, IPsec, JIRA, Confluence, ServiceNow
CISSP, CAP, CEH, Security+, AWS Security Specialty

Benefits

Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
Employee referral bonuses up to $10,000 per hired referral.
Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).
100% company-paid medical premiums for employees and eligible dependents (CareFirst, Kaiser, and UnitedHealthcare; PPO, POS, HMO, and HSA-compatible plans).
100% company-paid dental premiums for employees and eligible dependents.
100% company-paid vision premiums for employees and eligible dependents.
100% company-paid premiums for short-term disability.
100% company-paid premiums for long-term disability.
100% company-paid premiums for accidental death & dismemberment (AD&D).
100% company-paid life insurance up to $200,000.
401(k) with immediate vesting: 4% company match plus 4% non-elective company contribution (8% total). Pre-tax and Roth options.
Up to 20 days of flexible paid time off (PTO).
11 paid floating holidays.
Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).

Work type: On-Site
Shift: First
Location: Annapolis Junction, MD (United States)
Requisition ID: 4914
Referral eligibility: Eligible

View full job page →

Today

Information Security Analyst Senior

General Dynamics Information Technology Tyndall AFB, FL

Tyndall AFB, FL

Today

$77k - $101k/yr Full time Senior Information Security Information Systems Security

Apply Now

Job Description

The Senior Information Security Analyst will coordinate vulnerability scanning and identification across network hosts, strengthen vulnerability management practices, and support remediation and audit or examination efforts. The role works closely with Engineering and Operations teams, along with vendors, to help protect information and reduce the risk of unauthorized access.

Key Responsibilities

Manage system vulnerabilities in alignment with security requirements, applying NIST continuous monitoring standards and RMF critical security controls and countermeasures based on mission system risk assessments.
Identify and evaluate emergency or priority vulnerabilities, incorporating input from cyber intelligence, engineering, or operations, and propose targeted remediation approaches.
Analyze vulnerability data and assist with prioritization and remediation efforts in accordance with risk and vulnerability management standards.
Develop a deep understanding of vulnerabilities, including impacts and mitigation techniques, and clearly document and communicate findings to stakeholders.
Update and create security standards and templates to meet evolving regulatory, audit, and related requirements.
Improve the effectiveness and efficiency of enterprise vulnerability management practices across identification, assessment, and remediation.
Leverage and enhance existing vulnerability management frameworks, policies, and standards to support minimum industry best practices.
Coordinate data collection and documentation needed for examinations and audits.
Work with existing security solution vendors (for example, ACAS and HBSS) to identify potential solution approaches.
Research, develop, implement, test, and review information security measures to protect information and prevent unauthorized access.
Gather information necessary to maintain security and support external barrier capabilities such as firewalls and other security controls.
Support ISSO activities by assessing and reviewing systems to identify weaknesses, recommending improvements to address vulnerabilities, implementing changes, and documenting upgrades.

Required Qualifications

BA/BS and 3+ years of experience; additional years may be considered in lieu of degree (7+ years).
Experience and training with Microsoft Server 2016/2019 or newer, including Active Directory, Radius, DNS, and Group Policy.
Experience and training with virtual environments (such as VMware and Hyper-V).
Familiarity with maintaining and operating Trellix ENS (formerly McAfee Endpoint Security) and Tenable Security Center (ACAS) scans.
Familiarity with maintaining and operating SQL Server.
Experience applying patches/updates and STIGs.
Ability to possess and maintain a minimum IAT level II certification IAW the DoW directive 8140.01 (sec+, CCSP, CASP+).
Secret clearance.
On customer site.

Technologies and Tools

NIST continuous monitoring standards
RMF
ACAS, HBSS
Microsoft Server 2016, Microsoft Server 2019
Active Directory, Radius, DNS, Group Policy
VMware, Hyper-V
Trellix ENS (formerly McAfee Endpoint Security)
Tenable Security Center (ACAS)
SQL Server
STIGs
Firewalls and other security measures

Benefits

401K with company match
Comprehensive health and wellness packages
Internal mobility team dedicated to helping you own your career
Professional growth opportunities including paid education and certifications
Cutting-edge technology you can learn from
Paid vacation and holidays to help rest and recharge

Required Clearance and Work Details

Clearance level: Secret
Public trust: None
Requisition type: Regular
Location: Tyndall AFB, Florida (Onsite Workplace)
Travel required: Less than 10%
Citizenship: U.S. Citizenship Required

Identity Verification Process

You are expected to be on camera during virtual interviews.
The employer may take your picture to verify your identity and prevent fraud.
Proceeding authorizes the collection, processing, and use of biometric data for identity verification and security purposes.

View full job page →

3d ago

Information Systems Security Engineer

CyberCore Technologies Columbia, MD

Columbia, MD

3d ago

$55k - $65k/yr Full time Data Security Engineer Information Security

Apply Now

Job Description

This Information Systems Security Engineer role at CyberCore Technologies supports information assurance needs within a Federal environment. The position requires current DoD-aligned certification coverage and an active TS/SCI security clearance with polygraph, along with qualifying education and/or IT experience.

Location and Employment Details

Work location: Columbia, MD (onsite)
Compensation: USD 55,000 to 65,000 per year
Minimum experience: 1 years

Security Clearance and Compliance Requirements

DoD 8570.01-M compliance: Active IAT Level II certification (Security+) OR active IAM/IASAE Level 1 (CASP or CISSP)
Security clearance: Active TS/SCI security clearance with a current polygraph

The role also requires applicable DoD Information Assurance certifications and qualifying education/IT experience.

Core Qualifications

Education requirement (option 1): Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline from an accredited college or university
Education requirement (option 2): Associate’s degree in a related field from an accredited college or university, plus a technical certification such as Security+ and two (2) years of general IT experience
Education requirement (option 3): High School Diploma/GED and four (4) years of general IT experience, with at least one (1) year of information systems security experience

Experience

Desirable: Experience as an ISSE on programs and contracts of similar scope, type, and complexity within the Federal Government

Benefits

Health Insurance
Dental and Vision Insurance
Basic Life Insurance and Disability Insurance
Paid Holidays and Paid Time Off (PTO)
Paid Parental Leave
Tuition Reimbursement
401(k) plan with a company match

View full job page →

Information Systems Security Cybersecurity Jobs

Information Systems Security Engineer

Information Security Analyst Senior

Information Systems Security Engineer

Get Information Systems Security Cybersecurity Jobs alerts