Sr ISSE-Senior Information Systems Security Engineer

Dynamic Data Solutions, D2S LLC is seeking a Senior Information Systems Security Engineer (Sr ISSE) to validate and design security requirements and architectures, evaluate security threats and risks, and support information assurance and security activities across large, geographically distributed programs.

Key Responsibilities

• Validate and verify system security requirements, and establish security designs for large-scale systems, major system elements, and interfacing systems within complex, geographically distributed network environments.
• Identify and implement information security architectures and functionality to support consistent application of security policy and enterprise solutions.
• Recommend and develop technical solutions, products, and standards aligned with current and target system security architecture.
• Assess and mitigate security threats and risks throughout the program lifecycle.
• Lead and/or contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.
• Collaborate with internal technical experts on a day-to-day basis to support program security outcomes.
• Communicate with Program Managers and customer organization points of contact as needed regarding security issues of significant importance.
• Participate in Program Increment Planning and related agile team activities.
• Coordinate with System Engineering, Test Engineering, and Integration teams to ensure hardware and software architecture and implementation meet security requirements.
• Analyze and assess system implementation against multiple security compliance policies, and recommend and implement enhancements.
• Evaluate security solutions to confirm alignment with customer requirements for processing information.
• Assess the operational security posture impact of new development.
• Evaluate, review, and test critical software.
• Propose, assess, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
• Audit and assess system security configuration settings using common methodologies and tools.
• Manage and enforce security strategies and policies affecting components of geographically distributed systems.
• Provide configuration management for security-relevant information system software.
• Serve as a subject matter expert in security architecture, advising Program Managers, customer technical experts, and internal program teams.
• Formulate security compliance requirements for new system features and support identification and remediation of security issues across the system.
• Support IA functions including risk assessment, risk management, security control assessment, continuous monitoring, service design, and related program support activities.
• Work with development teams to strengthen understanding of vulnerabilities, attack vectors, and remediation approaches.
• Plan and conduct security verification testing of relevant type 1 devices.

Required Qualifications

• Minimum 12 years of experience working as an ISSE on a large technical program.
• Solid understanding of security practices and policies, including hands-on vulnerability testing experience using customer tools.
• Experience applying the Risk Management Framework.
• Experience formulating and assessing IT security policy.
• Demonstrated knowledge and hands-on experience with common security tools, including Nessus, NMAP, and Wireshark, along with hardware/software security implementation, communication protocols, encryption techniques/tools, and web services.
• Experience with secure configuration of commonly used desktop and server operating systems.
• Comfort working across multiple systems and components simultaneously in varied configurations.
• Strong verbal and written communication skills.
• Commitment to adopting and adhering to best practices.
• Ability to plan and prioritize tasks and communicate technical options and trade-offs clearly.
• Ability to deliver high-quality work independently and as part of a team in a fast-moving environment.

Technologies

• Nessus
• NMAP
• Wireshark
• Risk Management Framework
• Web services

Desired Skills

• Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline.
• Five (5) years of experience with Defense in Depth principles/technology, including access control, authorization, identification and authentication, public key infrastructure, and network and enterprise security architecture, plus application of risk assessment methodology to system development.
• DoD 8570 compliance with IASAE Level 2 or 3.
• ISSEP certification.
• CISSP certification.
• Experience developing and implementing integrated security services management processes, including assessing and auditing network penetration testing, anti-virus planning assistance, risk analysis, and incident response.
• Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls that encompass development, design, and implementation.
• Experience with penetration testing tools.
• Experience with scripting languages.

Company Overview

Dynamic Data Solutions, D2S LLC operates with a mission-led, values-driven approach. D2S was founded on a people-first, mission-focused philosophy centered on investing in people, supporting growth, empowering accountability, and upholding integrity to enable trusted outcomes for customers and partners. The organization emphasizes proven leadership and delivery of trusted results.