Senior Information Systems Security Engineer (ISSE) – Hybrid
Wyetech is seeking a Senior Information Systems Security Engineer (ISSE) to support the design, development, implementation, and accreditation of secure information systems supporting Department of Defense (DoD) missions. This position will perform security assessments and support system and network designs encompassing multiple enclaves with differing data protection and classification requirements. The ISSE will collaborate with government stakeholders, system architects, developers, and engineering teams to implement security controls, manage system authorization activities, and strengthen the security posture of distributed architectures and cloud-based systems supporting big data applications.
Required Skills/Experience:
Experience creating, reviewing, and maintaining system authorization documentation for completeness, accuracy, and compliance with federal and DoD policies.
Strong understanding of DoD Risk Management Framework (RMF) processes and system accreditation requirements.
Experience implementing DoD system accreditation processes, including RMF or DIACAP.
Experience assessing operational risks associated with integrated open-source, Government Off-the-Shelf (GOTS), and Commercial Off-the-Shelf (COTS) software components.
Experience utilizing vulnerability management systems, automated security scanning tools, and system accreditation systems of record.
Experience interpreting and implementing Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
Experience performing security planning, vulnerability assessments, risk analysis, risk management, and mitigation activities.
Strong understanding of NIST SP 800-53 security controls, control inheritance, and security authorization artifact generation.
Working knowledge of TCP/IP protocols and services, computer architectures, and network topologies.
Experience navigating security authorization workflows, uploading security artifacts, and managing Plans of Action and Milestones (POA&Ms) in eMASS, Xacta, or equivalent RMF systems of record.
Experience designing and implementing secure networking, computing, and enclave environments.
Experience supporting systems with multiple enclaves and differing data protection or classification requirements.
Understanding of distributed architectures and cloud-based systems supporting big data applications.
Experience recommending system-level security solutions and guiding development teams in implementing appropriate security controls.
Experience supporting the design and implementation of trusted relationships among external systems and architectures.
Knowledge of information assurance policies, procedures, and cybersecurity workforce requirements.
Ability to establish and implement defensible security processes when established procedures are unavailable.
Strong analytical, technical documentation, communication, and problem-solving skills.
Ability to work independently and collaboratively with diverse technical teams and government stakeholders.
Ability to work a hybrid schedule, averaging one (1) to two (2) days per week onsite in Columbia, Maryland, with flexibility to accommodate changes in mission requirements.
Preferred Skills:
CISSP-ISSEP certification is highly desired.
Experience with Bash scripting.
Experience with Kubernetes container orchestration.
Experience creating technical diagrams using Microsoft Visio or draw.io.
Experience with Red Hat Enterprise Linux (RHEL).
Experience with Amazon Web Services (AWS) cloud environments.
The Information Systems Security Engineer (ISSE) performs or reviews technical security assessments of computing environments to identify vulnerabilities, noncompliance with established Information Assurance (IA) standards and regulations, and appropriate mitigation strategies.
Validates and verifies system security requirements definitions and analyses and…