Sr. Information Systems Security Engineer (ISSE), (Vulnerability Management)

Overview

The Information Systems Security Officer (ISSO) manages all aspects of an organization's information security system, for classified and unclassified systems, including researching, testing, training and implementing programs designed to safeguard sensitive information from any possible breaches. The ISSO drives Authority to Operate (ATO) and / or Authority to Proceed (ATP) efforts and makes independent recommendations to the customer during the process. ISSOs understand and execute the Risk Management Framework process. The ISSO conduct risk analyses and writes documents including Plan of Action and Milestones, System Security Plans, System Specific Policies and Procedures, Configuration Management Plans, Contingency Plans and Test Results, Business Impact Analyses, and Security Impact Analyses.

Responsibilities

As an information systems security engineer (ISSE), you will support the customer in safeguarding networks against unauthorized modification, destruction, or disclosure. Activities include but are not limited to :

• Conducting risk analysis on products reviewing CVEs, plugins, CWEs etc;
• Understanding how to explain and remediate the technical security controls;
• Facilitating Technical Insertions (the introduction of any new and / or improved hardware or software capabilities into an established operational system) for new products;
• Reviewing change requests for security impacts and technical documentation from a security perspective;
• Participates in Agile Planning Events to provide technical input.
• Providing technical input into trade studies for tools;
• Providing technical expertise in implementation of technical security controls in government cloud environments (cloud security experience is highly desired);
• Researching, evaluating, testing, recommending, communicating, and implementing new security software or devices;
• Implementing, enforcing, communicating internet, network, or other information security policies or security plans for data, internet, software applications, hardware, telecommunications, and computer installations;
• Managing all aspects of an organization's information security system, including researching, testing, training and implementing programs designed to safeguard sensitive information from any possible breaches.

Qualifications

Required Education, Experience, & Skills

Required Clearance : Secret

Specific to cloud environment vulnerability management :

The ISSE supports the Information systems security officer (ISSO) in managing all aspects of an organization's information security system, including researching, testing, training and implementing programs designed to safeguard sensitive information from any possible breaches. The ISSE will support the ISSO in the following activities (including but not limited to) :

Preferred Education, Experience, & Skills

Desired Certifications : CISSP, CCSP, AWS-SEC, MCASEA

Equal employment opportunity employer :

All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Illuminate is committed to providing veteran employment opportunities to our service men and women.