Senior Information Systems Security Engineer (ISSE) – Hybrid with Security Clearance

Wyetech Senior Information Systems Security Engineer (ISSE) – Hybrid HII - Columbia, MD - Full Time Senior Information Systems Security Engineer (ISSE) – Hybrid Wyetech is seeking a Senior Information Systems Security Engineer (ISSE) to support the design, development, implementation, and accreditation of secure information systems supporting Department of Defense (DoD) missions. This position will perform security assessments and support system and network designs encompassing multiple enclaves with differing data protection and classification requirements.

The ISSE will collaborate with government stakeholders, system architects, developers, and engineering teams to implement security controls, manage system authorization activities, and strengthen the security posture of distributed architectures and cloud-based systems supporting big data applications.

Required Skills/Experience

• Experience creating, reviewing, and maintaining system authorization documentation for completeness, accuracy, and compliance with federal and DoD policies.
• Strong understanding of DoD Risk Management Framework (RMF) processes and system accreditation requirements.
• Experience implementing DoD system accreditation processes, including RMF or DIACAP.
• Experience assessing operational risks associated with integrated open-source, Government Off-the-Shelf (GOTS), and Commercial Off-the-Shelf (COTS) software components.
• Experience utilizing vulnerability management systems, automated security scanning tools, and system accreditation systems of record.
• Experience interpreting and implementing Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Experience performing security planning, vulnerability assessments, risk analysis, risk management, and mitigation activities.
• Strong understanding of NIST SP 800-53 security controls, control inheritance, and security authorization artifact generation.
• Working knowledge of TCP/IP protocols and services, computer architectures, and network topologies.
• Experience navigating security authorization workflows, uploading security artifacts, and managing Plans of Action and Milestones (POA&Ms) in eMASS, Xacta, or equivalent RMF systems of record.
• Experience designing and implementing secure networking, computing, and enclave environments.
• Experience supporting systems with multiple enclaves and differing data protection or classification requirements.
• Understanding of distributed architectures and cloud-based systems supporting big data applications.
• Experience recommending system-level security solutions and guiding development teams in implementing appropriate security controls.
• Experience supporting the design and implementation of trusted relationships among external systems and architectures.
• Knowledge of information assurance policies, procedures, and cybersecurity workforce requirements.
• Ability to establish and implement defensible security processes when established procedures are unavailable.
• Strong analytical, technical documentation, communication, and problem-solving skills.
• Ability to work independently and collaboratively with diverse technical teams and government stakeholders.
• Ability to work a hybrid schedule, averaging one (1) to two (2) days per week onsite in Columbia, Maryland, with flexibility to accommodate changes in mission requirements.

Preferred Skills

• CISSP-ISSEP certification is highly desired.
• Experience with Bash scripting.
• Experience with Kubernetes container orchestration.
• Experience creating technical diagrams using Microsoft Visio or draw.io.
• Experience with Red Hat Enterprise Linux (RHEL).
• Experience with Amazon Web Services (AWS) cloud environments.

The Information Systems Security Engineer (ISSE) performs or reviews technical security assessments of computing environments to identify vulnerabilities, noncompliance with established Information Assurance (IA) standards and regulations, and appropriate mitigation strategies. Validates and verifies system security requirements definitions and analyses and establishes secure system designs.

Designs, develops, implements, and integrates IA and security systems and components for networking, computing, and enclave environments, including systems with multiple enclaves and differing data protection or classification requirements. Incorporates information assurance into systems deployed to operational environments. Assists architects and systems developers in identifying and implementing appropriate information security functionality to ensure consistent application of Agency security policies and enterprise solutions.

Supports the development of security architectures and enforces the design and implementation of trusted relationships among external systems and architectures. Assesses and mitigates system security threats and risks throughout the program lifecycle. Contributes to security planning, assessment, risk analysis, risk management, certification, and security awareness activities for system and networking operations. Reviews certification and accreditation documentation and provides feedback regarding completeness, accuracy, and compliance with applicable requirements.

Capabilities: (U) Perform or review technical security assessments of computing environments to identify vulnerabilities and noncompliance with established information assurance standards and regulations. (U) Recommend appropriate mitigation strategies to address identified system vulnerabilities and security deficiencies. (U) Validate and verify system security requirements definitions and analyses. (U) Establish system security designs based on applicable security requirements and operational objectives. (U) Design, develop, implement, and integrate information assurance and security systems and system components. (U) Support networking, computing, and enclave environments, including multiple enclaves with differing data protection and classification requirements. (U) Incorporate information assurance requirements and security controls into systems deployed to operational environments. (U) Assist system architects and developers in identifying and implementing appropriate information security functionality. (U) Ensure consistent application of Agency security policies and enterprise security solutions. (U) Support the development and implementation of secure system architectures. (U) Enforce the design and implementation of trusted relationships among external systems and architectures. (U) Assess and mitigate system security threats and risks throughout the program lifecycle. (U) Develop, review, and maintain system authorization documentation in accordance with federal and DoD policies. (U) Implement and support DoD RMF processes, including security control assessment, authorization, and continuous monitoring activities. (U) Apply NIST SP 800-53 security controls, control inheritance concepts, and security authorization artifact requirements. (U) Interpret and implement DISA STIGs and SRGs to support system hardening and security compliance. (U) Utilize vulnerability management systems and automated security scanning tools to identify security weaknesses and assess compliance. (U) Review vulnerability assessment results and recommend appropriate remediation and mitigation strategies. (U) Manage security authorization workflows, documentation, and POA&Ms within eMASS, Xacta, or equivalent RMF systems of record. (U) Assess operational risks associated with integrated open-source, GOTS, and COTS software components. (U) Provide security planning, assessment, risk analysis, and risk management support for information systems and networking operations. (U) Recommend system-level solutions to resolve security requirements and guide development teams in meeting security posture requirements. (U) Apply information assurance policies, procedures, and security engineering principles to develop secure networking, computing, and enclave environments. (U) Support secure system designs involving distributed architectures and cloud-based applications. (U) Establish and execute defensible security processes when established procedures are unavailable. (U) Collaborate with government stakeholders, system architects, developers, and engineering teams to ensure implementation of appropriate security measures. (U) Review certification and accreditation documentation and provide recommendations regarding completeness, accuracy, and compliance.

Qualifications: Candidates must meet one (1) of the following education and experience combinations:

• Bachelor's degree in Computer Science, Information Assurance, Information Security, Systems Engineering, or a related discipline from an accredited college or university, plus a minimum of nine (9) years of relevant experience as an ISSE supporting large, multi-tiered programs.
• Master's degree in a related technical discipline plus a minimum of seven (7) years of relevant experience.
• High School Diploma/GED plus a minimum of thirteen (13) years of relevant experience. Additional qualifications:
• Experience implementing DoD system accreditation processes, including DIACAP or RMF, with RMF experience preferred.
• Working knowledge of TCP/IP protocols, computer architectures, and network topologies.
• Understanding of NIST SP 800-53 security controls, control inheritance, and artifact generation.
• Experience implementing DISA STIGs and SRGs and supporting vulnerability management, mitigation, and compliance processes.
• Experience reviewing automated security scanning results and identifying appropriate corrective actions.
• Hands-on experience navigating workflows, uploading security artifacts, and managing POA&Ms within eMASS, Xacta, or equivalent RMF systems of record.
• Must meet applicable DoD 8140 cybersecurity workforce qualification requirements and possess an IAT Level II certific