ISSE

Chantilly, VA

Industry: ALKU:Gov InfoSoft Job Number: 147408

INFORMATION SYSTEM SECURITY ENGINEER (ISSE)

Candidate must have a TS/SCI  security clearance with a polygraph in order to be considered

Program and Job Description:

The program that supports the customer' s internal systems and this group’ s mission is order to detect anomalies happening within their systems and to ensure a secure environment.  This a growing Cyber Security area within the customer and continues to gain more and more notoriety and exposure within the highest levels of the customer.  Their environment consists of VMWare ESX, VSphere, and VCenter, RedHat Linux, Ancible, Puppet, Chef, Zookeeper, SAN for several large enterprise enclaves.  The successful candidate will support overall network defense activities, provide in-depth analysis of suspected malicious code and/or infected systems and network devices, perform necessary inspection and reverse-engineering activities to understand the behavior of software, determine the root cause for the presence of threats, and develop recommendations to counter threats.

Day-to-Day Responsibilities:
  • Conducting proof of concept testing
  • Designing, testing, and integrating new security products as directed
  • Beta testing new capabilities when directed, and conducting software testing as required (patches and other updates)
  • Maintaining a robust library of documentation, to include network diagrams for cyber defense capabilities and sensors, and making documentation available to all personnel with appropriate need-to-know
  • Providing engineering support for all primary systems, such as network-based intrusion detection and prevention systems
  • Maintaining, updating, and conducting routine vulnerability scanning across all Sponsor networks
  • Overseeing patching, hardening, and base-lining activities across all Sponsor networks, and ensuring all stakeholders are in compliance with patching/hardening requirements
  • Maintaining, updating, configuring, and ensuring the successful deployment of logging/auditing tools across Sponsor networks
  • Maintaining system baselines and configuration management items, including security event monitoring policies
  • Working with all stakeholders to ensure complete and functioning systems that meet all requirements
  • Ensuring all network defense capabilities are kept current, patched, and securely configured, and the management is informed of status
  • Analyzing data flows into, out of, and across Sponsor networks to identify and rectify any security gaps
  • Performing limited penetration testing into targeted networks as directed

Required:
  • Significant, demonstrated experience navigating the Sponsor' s accreditation process and ICD 503 requirements
  • Experience working with complex, intertwined systems and data flows
  • Penetration testing
  • prior ISSE experience
  • Experience inventorying complex networks, and with all facets of network documentation (security compliance, configuration management, patching, centralized authentication, removable media, etc.)
  • Hands-on experience with a wide range of diverse technologies/disciplines, especially with a security focus (networking, UNIX/Linux, Windows, Storage, Virtualization, etc.)
  • Expert-level abilities in the following areas:
    • Maintaining, configuring, and monitoring network security applications, network devices, encryption technologies, operating systems, and storage appliances
    • Monitoring network defense technologies and analyzing the outputs
    • Creating, maintaining, and communicating complex information technology documentation, particularly network and security documentation
    • Executing penetration tests, formal assessments, and other formal information security and compliance inspections
    • Self-starter with excellent people skills - able to work across teams, organize meetings/boards, and drive change throughout an organization

Desired:
  • Experience working across a large team to drive a security agenda
  • CCNA strongly desired
  • CISSP strongly desired
  • Experience with the Xacta 360 cyber risk and compliance automation tool

Some of our offerings include:
  •   FREE Medical/Dental/Vision/LTD/STD benefits premiums
  •   Weekly Pay Roll
  •   PTO/Holiday/Snow Day/Maternity/Paternity/Bereavement leave and pay
  •   Robust 401K Match
  •  $5K in annual Training
  •   Charity Event participation
  •   Family fun events (Sporting events, Fun Run)
  •   Adult  fun events (Holiday Party, Dinners, Lunches, Happy Hours)

Job Type: FT

Send an email reminder to:

Share This Job:

Related Jobs:

Login to save this search and get notified of similar positions.