Information System Security Engineer

About the role

Support an active Naval Surface Warfare Center Philadelphia Division (NSWCPD) contract in Philadelphia, PA. The Information Systems Security Engineer I (ISSE I) will research, compile, and document reviews, drawings, schematics, reports, interviews with technical staff members, and published material for use in logistics documents, technical manuals, test plans, reports, training materials, installation guides, and other technical documentation.

Responsibilities

• Develop system security/IA plans and controls under guidance in DIACAP, RMF, NIST 800-53, NIST 80-37, CNSS 1253, DCID 6/3, and NISCAP.
• Shepherd System Security Plans through inception and decommission utilizing the eMASS workflow and RMF process.
• Review audit events and data for information systems and coordinate events/incidents that may occur with stakeholders.
• Define certification Test & Evaluation requirements.
• Coordinate with program management and customers to mitigate risks and ensure compliance with DoD IA requirements.
• Develop written instructions, procedures, schematics, and other technical documentation; review, redline, or rewrite such documentation in support of In-Service information technology tools.
• Provide the status of assigned tasks via both prepared and ad-hoc oral briefings to the Project Manager.
• Decompose system specifications to determine security/IA requirements and work with systems engineers, developers, and other security personnel to develop management and operational procedures to meet those requirements.
• Assist the ISSMs in meeting their duties and responsibilities for their respective systems.
• Perform control correlation identifier (CCI) assessments of applicable security controls.
• Support the DoDEA ISCM program by assisting the ISO in completing ISCM responsibilities and participating in the configuration management process for their respective systems, ensuring completion and reporting annually.
• Provide an assessment and recommendation to the ISO and AO as to the need for reaccreditation as a result of a significant change to the system identified during continuous monitoring.
• If required to perform the duties of a Control Assessment Validator (referred to as “Validator” within eMASS), act as a trusted agent of the SCA to review test results, artifacts, entered vulnerabilities for non-compliant controls or CCIs, and the status of each CCI of a security control.

Requirements

• Proficiency in DISA STIG procedures to include ACAS, HBSS, SCAP, & network scanning.
• Required to have and maintain a current DoD IAM Certification.
• Ability to perform duties unsupervised.
• Experience and knowledge with direct FISMA compliance and requirements.
• Active Department of Defense SECRET clearance required.
• Must be a U.S. Citizen pursuant to the Government Contract.
• Maintain compliance with DoD 8570.01-M IAT II requirements.

Qualifications

• Bachelor of Science degree in Computer Science, engineering, information technology, or a related field.
• Minimum of five (5) years of experience in designing computer systems, integrating computer hardware, software, building computers, or designing network systems.