Information Systems Security Engineer (ISSE)

Job Description

Job Description

Description :

Athenix Solutions Group is looking for multiple Information Systems Security Engineers for a large program in the Annapolis Junction, MD area. The Information Systems Security Engineer (ISSE) shall perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies.

Responsibilities :

• Validate and verifiy system security requirements definitions and analysis and establishes system security designs
• Design, develop, implement and / or integrate IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection / classification requirements
• Build IA into systems deployed to operational environments
• Assist architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Agency security policy and enterprise solutions
• Support the building of security architectures
• Enforce the design and implementation of trusted relations among external systems and architectures
• Assess and mitigate system security threats / risks throughout the program life cycle
• Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations
• Review certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content
• Apply system security engineering expertise in one or more of the following to : system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification; authentication; and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing
• Support security authorization activities in compliance with NSA / CSS Information System Certification and Accreditation Process (NISCAP) and DoD Risk Management Framework (RMF), the NIST Risk Management Framework (RMF) process, and prescribed NSA / CSS business processes for security engineering

Requirements :

All openings require a TS / SCI with polygraph clearance to start.

Level 0 ISSE shall possess the following capabilities :

Level 1 ISSE shall possess the following capabilities :

Level 2 ISSE shall possess the following capabilities :

Level 3 ISSE shall possess the following capabilities :

Equal Opportunity Employer, including disability and protected veteran status.