Information Systems Security Engineer

Amyx, Inc. is seeking multiple Information Systems Security Engineers to support the US Transportation Command (TRANSCOM) Senior Information Security Officer (SISO) contract from Scott Air Force Base, IL. This onsite role centers on executing risk management activities, advising on countermeasures, and helping implement security program guidance, cyber alerts, and best practices within the USTRANSCOM environment.

In this position, you will support the Government’s security risk management processes by assessing potential risks, mitigation measures, and residual risk, and by delivering Security Risk Assessment recommendations to the Government as required. You will also research newly developed protections for command systems and assist in developing and administering effective security programs for Government approval.

Responsibilities

• Conduct risk assessments to determine the risk associated with integrating new systems or capabilities into the USTRANSCOM environment.
• Obtain supporting data from other DoD/Federal organizations, vendors, or Internet research as needed to support RMF requirements.
• Perform risk assessments using the principles of NIST SP 800-30 (Guide for Conducting Risk Assessments) and NIST SP 800-160 Vol I and Vol II, along with security best practices.
• Maintain current documentation on ISSE processes and procedures, and support the generation and delivery of all required contract deliverables.
• Implement security measures in accordance with applicable ICDs, NISP, NIST, and guiding Government regulations and local facility procedures.
• Conduct ongoing vulnerability testing to verify security features and operating controls are functional, effective, and aligned with Government standards.
• Coordinate with internal and external customers and Government security officials to handle routine information security matters with employees regarding identified issues.
• Communicate accurate information to support security duties and stakeholder needs.

Requirements

• Minimum 5 years of related experience.
• Secret security clearance.
• DoD 8570 IAT-II Certification.
• Proficiency with computer applications and testing tools, including Word, Excel, PowerPoint, DISA STIG Viewer, and Nessus (and others).
• Experience with the certification and accreditation process for information systems, including the ability to write, review, and coordinate system security plans.
• Excellent written and verbal communication skills, including the ability to present material to senior DoD and non-DoD officials.
• Ability to communicate effectively with senior leaders and customers to clearly present technical approaches and findings.

Technologies

• RMF
• NIST
• DevSecOps
• SSH
• HBSS
• NIST SP 800-30
• NIST SP 800-160 Vol I
• NIST SP 800-160 Vol II
• Word, Excel, PowerPoint
• DISA STIG Viewer
• Nessus

Benefits

• Medical, Dental, and Vision Plans (PPO & HSA options available)
• Flexible Spending Accounts (Health Care & Dependent Care FSA)
• Health Savings Account (HSA)
• 401(k) with matching contributions
• Roth
• Qualified Transportation Expense with matching contributions
• Short Term Disability
• Long Term Disability
• Life and Accidental Death & Dismemberment
• Basic & Voluntary Life Insurance
• Wellness Program
• PTO
• 11 Holidays
• Professional Development Reimbursement

Desired Skills

• BA/BS degree from an accredited university.
• Demonstrated knowledge and understanding of the USTRANSCOM mission.
• IAM-II or greater certification.

Physical Demands

• Sit at a workstation for extended periods; use hands to handle or feel objects, tools, or controls; reach with hands and arms; talk and hear.
• Work on a desktop or laptop computer for extended periods, including reading, reviewing/analyzing information, and providing recommendations, summaries, and/or reports in written format.
• Effectively communicate verbally and in writing.
• Occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds.
• Regular and predictable attendance is essential.