Systems Security Engineer III

Responsibilities

• Participate in high-quality interaction with customers, team members, contractors, and ultimately the government authorization official to achieve the directed Information Systems Security objectives.
• Serve as a subject matter expert in the field of Information Systems Security and provide guidance during the design, integration, or upgrade of software applications and information systems.
• Combined knowledge of Information Systems Security policies and operational understanding to develop or review Assessment & Authorization documentation based upon the NIST Risk Management Framework and other U.S. Department of Defense regulations.
• Perform random and scheduled security control assessments of software applications and information systems to ensure compliance with requirements based upon NIST Risk Management Framework and other U.S. military regulations.
• Participate in continuous monitoring activities such as vulnerability management, incident response, and accreditation record maintenance in systems such as eMASS or XACTA.
• Participate in work product evaluation of other Information Systems Security team members during the design, integration, or upgrade of new or existing information systems.

Qualifications

• You Must Have:
  • Bachelor's degree in Systems Security, Network Engineering, Information Technology, or related Engineering discipline
  • 5+ years of experience in IT security or a related field
  • Relevant experience can be considered as a substitute for the required educational qualifications
  • Must have IAT Level III certification (CISSP, CASP, GCIH, etc.) or ability to attain within 6 months of hire
  • Demonstrated experience working in an application security environment and performing application security related tasks such as SAST/DAST/SCA testing
  • Demonstrated experience with security control assessment tools such as ACAS / Tenable Nessus, SCAP Compliance Checker, Static Application Security Testing tools and Dynamic Application Security Testing tools
  • Strong understanding of DoD applicable Security Technical Implementation Guides (STIGs), NIST special publications, and NSA Guides
• We Prefer:
  • Experience implementing DevSecOps processes within existing DevOps pipelines
  • Experience configuring, deploying, and securing applications within the modern Kubernetes / CNCF landscape
  • Experience working with the RMF accreditation process for a Department of Defense customer
  • Experience working with deployed tactical information systems
  • Experience working with additional security industry certifications such as the CISSP-ISSEP, CISM, or C|EH Certification