Information Systems Security Engineer (ISSE)

Absolute Business Solutions Corp is hiring an Information Systems Security Engineer (ISSE) to support cybersecurity and security-engineering work for the National Military Command Center (NMCC). In this onsite role, you will assist Air Force missions by performing technical security assessments, managing vulnerability scanning and remediation support, and administering security tools and servers.

What you’ll do

• Provide cybersecurity and security-engineering services, including system security engineering, cybersecurity risk assessments, and security architecture support.
• Perform and review technical security assessments of computing environments.
• Identify vulnerabilities, cybersecurity risks, and noncompliance with security standards and regulations.
• Develop and recommend mitigation strategies and corrective courses of action.
• Build, deploy, maintain, and patch HBSS Windows servers and ACAS Red Hat Enterprise Linux 7.9 and 8 servers.
• Build, maintain, secure, and patch McAfee ePolicy Orchestrator, Tenable SecurityCenter, and Nessus servers.
• Create and manage SecurityCenter accounts for vulnerability managers conducting ACAS scans.
• Analyze ACAS scan results and support remediation of identified vulnerabilities.
• Obtain and manage required licenses for HBSS ePO and Tenable SecurityCenter environments.
• Obtain HBSS and ACAS Kickstart ISO images from the Defense Information Systems Agency.
• Build and administer virtual servers supporting cybersecurity operations.
• Deploy, configure, and patch McAfee modules through ePolicy Orchestrator and develop McAfee policies for supported environments.
• Apply Security Technical Implementation Guides (STIGs) to HBSS Windows operating systems, McAfee policies, and ACAS Red Hat Enterprise Linux servers.
• Configure McAfee policies to comply with applicable security benchmarks and run Security Content Automation Protocol (SCAP) scans on Windows and Red Hat Enterprise Linux servers.
• Update Red Hat Enterprise Linux 7.9 and 8 RPM packages and establish local YUM repositories to patch offline ACAS servers.
• Deploy Rogue System Detection sensors across applicable network subnets, identify rogue subnets and endpoints, and support remediation actions.
• Troubleshoot Tenable SecurityCenter and Nessus scanner issues.
• Document technical solutions, assessment results, cybersecurity risks, and recommended courses of action, and communicate findings clearly to technical teams, government stakeholders, and leadership.
• Work independently, exercise sound judgment, and initiate appropriate action without continuous direction.

Required qualifications

• Active TS/SCI security clearance.
• Current CompTIA Security+ certification.
• At least 5 years of relevant systems-engineering experience.
• Demonstrated understanding of systems engineering, including system design and architecture.
• Hands-on experience administering and securing HBSS, ACAS, ePO, Tenable SecurityCenter, or Nessus environments.
• Experience building, deploying, maintaining, and patching Windows and Red Hat Enterprise Linux servers.
• Experience applying STIGs and other cybersecurity benchmarks to operating systems, security tools, and enterprise environments.
• Ability to interpret vulnerability scan results and develop or implement remediation actions.
• Demonstrated ability to identify cybersecurity risks across information-system and network architectures, including operating systems, hardware, and data-transfer protocols.
• Strong planning, organizational, prioritization, and time-management skills.
• Effective written, verbal, briefing, and presentation skills.
• Ability to communicate technical information effectively in formal and informal settings.
• Demonstrated initiative and ability to work independently.
• Ability to work full-time onsite in the NMCC environment.

Technologies you’ll work with

• Host-Based Security System (HBSS)
• Assured Compliance Assessment Solution (ACAS)
• Tenable SecurityCenter
• Nessus
• Windows
• Red Hat Enterprise Linux (7.9, 8)
• McAfee ePolicy Orchestrator (ePO) and McAfee modules
• Security Technical Implementation Guides (STIGs)
• Security Content Automation Protocol (SCAP)
• Rogue System Detection
• YUM and RPM packages

Location and schedule

• Location: Arlington, VA (onsite)
• Worksite: Full-time onsite at the NMCC at the Pentagon in Arlington, VA, with ad hoc telework based on mission requirements and prior client approval
• Schedule: Flexible, with core hours 7am to 3pm

Compensation

• Salary range: $120,000 - $206,000 per year
• Salary is commensurate with education, experience, knowledge, skills, abilities, and qualifications

Education and experience options

• Bachelor’s degree: at least 5 years of relevant experience
• Master’s degree: at least 3 years of relevant experience
• No degree: at least 12 years of intensive and progressive experience demonstrating the required technical proficiency
• Qualifying degrees should be in computer science, information technology, cybersecurity, engineering, or a closely related discipline

Benefits

• Generous PTO plus 11 federal holidays
• 401(k) retirement plan with company match and immediate vesting
• Annual health and wellness allowance
• Annual professional-development funding for education, training, certifications, and technology tools
• Eight hours of paid volunteer time annually
• Charitable-donation matching
• Internal and external employee referral bonuses
• Living Our Values recognition and bonus awards