System Engineer - Information Systems Security Officer Job at Synergy ECP (Annapolis Junction)

Information System Security Engineer - Senior

In support of a challenging, critical, and rewarding program that provides integ...

Location

United States , Warrenton

Salary:

185000.00 USD / Year

Amentum

Expiration Date

Until further notice

Requirements

Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI
Knowledge and experience with NESSUS/ACAS and Trellix administration
Experience in Splunk role while working in a Splunk Clustered Environment
Must be able to work a 40-hour work week, normally Monday through Friday
Ability to work overtime during critical peaks and be available to meet last-minute requests for overtime if needed
Ability to travel (5-10%) primarily within 75 miles
Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project, and Visio
Exceptional attention to detail
excellent verbal and written communication skills
strong critical thinking, organizational, time-management, and problem-solving skills

Job Responsibility

Endpoint Security Engineering (Trellix/ePO): Expertly design, configure, and maintain Trellix components (ePO, Trellix Agent, DLP, HIPS, Policy Auditor, ABM, and VSE) across Windows and Linux environments
Author and deploy endpoint security policies for ENS modules (Threat Prevention, Firewall, Web Control) based on DISA STIGs and organizational needs
Develop custom signatures, rules, and exceptions to address zero-day threats and specific operational requirements
Validate custom exceptions to ensure uninterrupted operation of mission-critical processes without compromising compliance
Vulnerability Management (ACAS/Nessus): Design enterprise-wide vulnerability scanning strategies and manage the deployment of Security Centers and Nessus scanners
Serve as the final escalation point for complex scan issues, credentialing problems, and system communication failures
Configure automated reporting of compliance data to continuous monitoring systems and risk-scoring repositories
Security Integration & Engineering: Integrate Trellix and ACAS with tools such as Splunk, XSOAR, and ServiceNow to automate workflows and enhance incident response
Provide authoritative recommendations and ACAS-generated artifacts to support the Assessment and Authorization (A&A) process and RMF packages for Authority to Operate (ATO)
Lead the maintenance and scalability of test, development, and operational environments, collaborating with Network and DevSecOps teams to enhance resilience

What we offer

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance

Fulltime

Information System Security Engineer - Senior

In support of a challenging, critical, and rewarding program that provides integ...

Location

United States , San Antonio

Salary:

160000.00 - 175000.00 USD / Year

Amentum

Expiration Date

Until further notice

Requirements

Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI
Experience in Splunk role while working in a Splunk Clustered Environment
Knowledge and experience with NESSUS/ACAS and Trellix administration
Must be able to work a 40-hour work week, normally Monday through Friday
Ability to work overtime during critical peaks and be available to meet last-minute requests for overtime if needed
Ability to travel (5-10%) primarily within 75 miles
Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project, and Visio
Exceptional attention to detail
excellent verbal and written communication skills
strong critical thinking, organizational, time-management, and problem-solving skills

Job Responsibility

Experience creating custom dashboards, writing queries, building, and generating reports, and setting up alerts and notifications using all the Cyber tools (Splunk, Tenable, Trellix)
Demonstrated proficiency with recognizing and onboarding new data sources into the cyber tools and analyzing the data for anomalies and trends
Primarily responsible for maintaining the test and operational environments to include all cybersecurity tool sets and collaborating with systems and network engineers
Use knowledge, skills, and ability to conduct research for designing, integrating, and implementing security controls into current and future products/systems thus ensuring these systems can be accredited based on compliance with the Joint Special Access Program Implementation Guide (JSIG)
Recommend the components to implement system security requirements using intimate knowledge of security design best practices for information systems throughout the system development life cycle to support the generation of security engineering products
Assist with the design, deployment, and administration of a multi-site, distributed Splunk environment including Multi-site Clustering, Search Head Clustering, Universal Forwarders, Deployer, and Deployment Server
Configure, operate, and maintain Trellix and its components (ePolicy Orchestrator, Trellix Agent, Data Loss Prevention, Host Intrusion Prevention System, Policy Auditor, Asset Baseline Monitor, and Virus Scan Enterprise) on Windows and Linux creating exceptions to allow essential processes to continue uninterrupted
Administration/operation of information security compliance tools/platforms with a special concentration in managing Tenable Security Center and NESSUS
Provide Tier 1, 2, and 3 maintenance support for deployed cyber security technologies
Assist with periodic and regular security assessments

What we offer

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance

Fulltime

Information System Security Engineer (ISSE), Journeyman

This position will perform cybersecurity analysis and support required for Risk ...

Location

United States , St. Inigoes

Salary:

80000.00 - 90000.00 USD / Year

KAIROS Inc

Expiration Date

Until further notice

Requirements

Bachelor’s degree in cybersecurity, computer science, IT, or another related field (required)
At least one (1) of the following certifications required: Security + CE, CGRC (formerly CAP), CASP+ CE, CISSP
Three (3) to seven (7) years of experience with RMF and A&A package development (required)
Experience with eMASS tool (required)
Strong facilitation skills when communicating results of findings
Well organized and a strong attention to detail
Strong customer relations, analytics, and documentation skills
Self-starter, highly motivated, strong work ethic with a commitment to quality
Microsoft office suite proficiency, i.e., Word, Excel, PowerPoint
Ability to work within a challenging, fast-paced, team-oriented environment

Job Responsibility

Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies
Ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure
Manage all aspects of the RMF process from start to finish and support accreditation package development through customer acceptance
Fully understand and execute all RMF steps necessary for creating A&A packages in accordance with DoD, Defense Information Systems Agency (DISA), and Federal cybersecurity requirements
Perform ACAS scans and complete Security Technical Implementation Guides (STIGs) on the systems or networks under test, as required
Develop and maintain required RMF artifacts
Monitor and maintain system Enterprise Mission Assurance Support Service (eMASS) records
Conduct Cybersecurity testing analysis and provide overall vulnerability and risk assessment reports
Draft, track and monitor Plan of Action and Milestones (POA&Ms)
Work closely with the Information Systems Security Manager (ISSM), assigned Information System Security Engineer(s) and System Administrators to ensure system compliance with Federal and DoD regulations, and cybersecurity best practices

What we offer

Medical Coverage with option for Heath Savings Account
Employer Paid Dental, Vision, Basic Life/AD&D, Short-Term/Long-term insurance
Paid Time Off
Eleven (11) Paid Holidays
Certification reimbursement program
Tuition Reimbursement Program
Paid Parental Leave
Employee Assistance Program (EAP)
Rewards and recognition programs
Community outreach events through our KAIROS Kares group

Fulltime

Lead Information Systems Security Officer (ISSO)

We are seeking an experienced and driven Lead Information Systems Security Offic...

Location

United States , Colorado Springs

Salary:

97016.00 - 168692.00 USD / Year

Arcfield

Expiration Date

Until further notice

Requirements

Bachelor’s degree (8-10 years' exp). Master's degree (6-8 years' exp) or a PhD (3-5 years' exp) in Computer Science, Information Security, Cybersecurity, or a related discipline (or equivalent work experience)
7+ years of experience in cybersecurity or system security-related roles
3+ years of experience in leadership, mentoring, or team management roles in a security-focused environment
Proven hands-on experience with security operations, policies, and frameworks
Must possess and maintain an ACTIVE TS/SCI CLEARANCE
Strong knowledge of cybersecurity frameworks and standards, such as NIST Risk Management Framework (RMF), FISMA, ISO 27001/27002, and GDPR
Thorough understanding of operating systems security (Windows, Linux, and Unix), network protocols, and security tools such as firewalls, VPNs, IDS/IPS, and endpoint protection
Experience using vulnerability scanning tools such as Nessus, Qualys, or Rapid7, and security information and event management (SIEM) tools like Splunk or LogRhythm
Scripting and automation experience with languages like Python, PowerShell, or Bash is preferred
Familiarity with cloud security best practices for platforms such as AWS, Microsoft Azure, or Google Cloud Platform

Job Responsibility

Manage and oversee a team of ISSOs, analysts, and engineers
Provide mentorship, training, and guidance for developing team members' skills and expertise
Assign and prioritize security-related tasks and initiatives
Drive the implementation of best practices for system security
Serve as the primary SME on security policies, frameworks, and applicable standards
Develop, implement, and maintain System Security Plans (SSPs)
Lead periodic risk assessments and vulnerability assessments
Manage the certification and accreditation (C&A) process
Conduct security audits and reviews
Monitor and assess security-related control systems

What we offer

Health Insurance
Life Insurance
Paid Time Off
Holiday Pay
Short Term and Long-Term Disability
Retirement and Savings
Learning and Development opportunities
wellness programs

Fulltime

Information Systems Security Officer (ISSO) 2

Amentum is seeking an Information Systems Security Officer (ISSO) 2 for a prime ...

Location

United States , Linthicum

Salary:

175000.00 - 190000.00 USD / Year

Amentum

Expiration Date

Until further notice

Requirements

Bachelor's degree in computer science, Cyber Security, IT Engineering or related field is required
In lieu of a bachelor's degree, four (4) additional years of work-related experience may be substituted for a total of twelve (12) years
Eight (8) years of combined work-related experience in the fields of IT, cybersecurity or security authorization is required
Experience in at least two of the following areas is required: knowledge of current security tools, hardware/software security implementation
communication protocols
or encryption tools and techniques
Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services
Compliance with DoD 8570.01-M with a minimum certification of IAM Level I is required
TS/SCI clearance

Job Responsibility

Provide support for a program, organization, system, or enclave's information assurance program
Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed
Assist with the management of security aspects of the information system and perform day-to-day security operations of the system
Evaluate security solutions to ensure they meet security requirements for processing classified information
Perform vulnerability/risk assessment analysis to support security authorization
Provide configuration management (CM) for information systems security software, hardware, and firmware
Manage changes to system and assess the security impact of those changes
Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
Support security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF)

What we offer

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance

Fulltime

Information System Security Officer (ISSO)

We are seeking a cleared Information System Security Officer (ISSO) to support c...

Location

United States , Costa Mesa

Salary:

Not provided

Robert Half

Expiration Date

Until further notice

Requirements

Active TS/SAP clearance
Candidates with frequent international travel or foreign relationships may experience delays during SAP read-on
Strong working knowledge of: JSIG
NIST RMF processes
Hands-on experience with: Security audits
Vulnerability scanning
Security tools used in continuous monitoring
ATO experience
Experience supporting ATO packages required
Some level of ATO ownership acceptable

Job Responsibility

Serve as the ISSO for multiple classified systems, supporting RMF lifecycle activities under ISSM direction
Create, update, and submit security authorization artifacts for: New hardware and software extensions
RMF updates and control changes
Support and maintain ATO packages, including initial authorizations, renewals, and extensions
Monitor and assess 3–5 classified networks, averaging ~1 hour per network for compliance and security reviews
Execute and document continuous monitoring activities using approved security tools
Participate in and support routine audits, inspections, and DoD compliance submissions
Partner with IT and engineering teams to ensure controls, scans, and audit activities are executed correctly
Conduct vulnerability scanning on a recurring schedule
Support systems currently partially complete within the NIST RMF lifecycle

What we offer

medical, vision, dental, and life and disability insurance
401(k) plan

Information System Security Officer 5

We are seeking a Information System Security Officer 5 (ISSO) to join our Securi...

Location

United States , Annapolis Junction

Salary:

150080.00 - 225120.00 USD / Year

M.C. Dean, Inc

Expiration Date

Until further notice

Requirements

Active DoD TS/SCI w/ polygraph clearance is required
Bachelor’s Degree preferred
Computer Science, Engineering, Information Technology, or Cybersecurity Discipline preferred
10+ years of progressive experience as an ISSO on programs and contracts of similar scope, type, and complexity is required
Experience in at least two of the following areas: knowledge of current security tools
hardware/software security implementation
communication protocols
encryption techniques/tools
DoD 8570 IAM Level-II certification or higher

Job Responsibility

Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
Maintain operational security posture for an information system or program
Assist with the management of security aspects of the information system and performs day-to-day security operations
Assist in the evaluation of security solutions
Provide support to the Information System Security Manager (ISSM)
Perform vulnerability/risk assessment analysis to support certification and accreditation
Provide configuration management (CM) for information system security software, hardware, and firmware
Manage changes to system and assesses the security impact of those changes
Support security authorization activities in compliance with NIST-based Intelligence Community and DoD accreditation processes
Develop and maintain documentation for C&A

What we offer

Medical, dental, vision, life, and disability insurance
Paid time off
Tuition reimbursement
401k Retirement Plan
Military Reserve pay offset
Paid maternity leave
Professional and technical training programs
Leadership training

Fulltime

Information Systems Security Officer

StraitSys is seeking an Information Systems Security Officer. In this role, you ...

Location

United States , Huntsville

Salary:

Not provided

Yulista Holdings

Expiration Date

Until further notice

Requirements

Ability to lead an Army program to meet all documentation, artifact, and eMASS cyber security management requirements to achieve an Authority to Operate (ATO) for an Army tactical system
Skilled in providing technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation
Versed in design of information system contingency plans and other deliverables which maintain appropriate levels of protection and meet time requirements for minimizing operations impact to customer organization as well as Security Authorization and Assessment (A&A processes)
Strong writing skills to develop and maintain System Security Plans (SSP), Contingency Plans, Privacy Impact Assessments, Certification Reports, Accreditation Reports, Plan of Action & Milestones (POA&M), and other C&A documentation
Demonstrates oral and written communication skills to work closely with all levels of personnel involved in IT operations and technical aspects of systems
Familiarity with security policies & guidance documents to assist with the preparation and maintenance of process artifacts and traceability documents purposed for compliance with Authority to Operate (ATO) requirements
Must be a US Citizen
Active Secret Clearance
Greater than one-year minimum practical experience as an ISSO familiar with eMASS, ACAS/ Nessus scans, applying STIGs, etc.
Familiarity with cybersecurity and IT security matters, including documentation requirements and security control implementation

Job Responsibility

Supports all aspects of Risk Management Framework(RMF) processes tailored to include minimum cybersecurity standards and demonstrate competency with specific experience in Cyber Security, Engineering, Test & Evaluation, (T&E) and/or Security Control Assessor (SCA) under a Certification & Accreditation (C&A) and/or Assessment & Authorization (A&A) process
Function as a representative for cybersecurity matters, including reporting requirements, data calls, Army CIO requirements, as well as legal and compliance matters relating to IT security
Design, implementation, and support of cybersecurity artifacts
Actively participate in IT and security meetings
Manage the ATO process for Army tactical missile systems and assets, including control implementation and documentation
Conducts testing and audit log reviews to evaluate the effectiveness of current security measures. Directs and implements the necessary controls and procedures to cost-effectively protect information systems assets from intentional or inadvertent modification, disclosure, or destruction
Monitors security of electronic data, application system usage, networks, and physical environment
Evaluate security solutions to ensure they meet security requirements for processing up to classified information and supervise and/or maintain the operational security posture for an information system or program

Fulltime

Select Country

System Engineer - Information Systems Security Officer

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?