Information Systems Security Engineer

Support the security engineering of IT infrastructure and new development efforts, aligned to DoD authorization and evaluation requirements.

Responsibilities

• Support and maintain IT infrastructure, applications, and new development projects, with a focus on network security.
• Support all phases of an Information Systems Security Engineering Program (ISSE) using ISSE-certified personnel to meet requirements of the DoD A&A Process.
• Support development of long-range IT strategic plans.
• Maintain and support the DSS IT technical guidelines and framework.
• Assess the quality and viability of existing solution architectures and evaluate design integrity.
• Evaluate technology products and develop trade studies when needed for potential addition of system functionality.
• Support the design of IT system architecture and IT solutions.
• Support development of executive orders and agency-wide policies.
• Support requirements definition and requirements validation.
• Analyze enterprise business models, IT solutions, trends, and emerging technologies.
• Provide support in planning and designing availability, capacity, and service continuity.
• Provide input to the DCSA A&A Process, including Information Security planning, design, testing, and analysis.
• Research and analyze Commercial-Off-The-Shelf (COTS) and Government-Off-The-Shelf (GOTS) and IA-enabled products as part of the security architecture.
• Ensure analyzed products are compliant with NSTISSP-11 and validated via NIAP Common Criteria Evaluation and Validation Scheme or NIST FIPS Cryptographic Module Validation Program (CMVP).

Requirements

• Minimum 5 years of cybersecurity experience and knowledge of DoD, NIST, Cloud, DISA, and other applicable cybersecurity policies, procedures, and best practices.
• Familiar with IT design, installation, integration with cloud, FEDRAMP, and DoD Information Levels.
• Active Top Secret or Secret clearance is a MUST.
• Must be IAM II or IAT II Certified.

Location

• United States (Hybrid)
• 2 days on site required in Quantico, VA

Education

• Associates or Bachelor’s Degree in Information Technology or Engineering

Certification

• Must be IAM II or IAT II Certified

Technologies / Frameworks

• DoD A&A Process
• Information Assurance Technical Framework (IATF)
• DoD 5200.1-M
• Common Criteria for IT Security Evaluation (ISO/IEC 15480)
• NSTISSP-11
• NIAP Common Criteria Evaluation and Validation Scheme
• NIST Federal Information Processing Standards (FIPS) Cryptographic Module Validation Program (CMVP)
• DCSA A&A Process
• FEDRAMP
• DoD Information Levels

ISSE Deliverables (at the Discretion of the Government)

• Service Acceptance Criteria and Service Level Requirements
• Service Level Policies, Procedures, and Reports
• Service Level Agreements and Operational Level Agreements
• Availability Policy, Plans, Design Criteria, Risk Analysis and Reports
• Business and IT service continuity policy, strategy, plans, risks, business impact analysis, and reports
• Technical Documents
• Market Research Analysis and Results
• Technical Guidelines and Framework
• Technical and Product Evaluation Reports
• Technical Studies
• Cloud Design Diagram with security impacts, including ingress/egress points from the DSS network to cloud infrastructure, locations of the CND Suite, and method of connecting to the DoD information network (DoDIN)
• Cloud Suitability Questionnaire Template to score application suitability for cloud deployment with security impacts
• Courses of Action
• Proofs of Concept