Feb 21
Top Secret/SCI
Senior Level Career (10+ yrs experience)
$150,000 and above
Polygraph
IT - Security
Laurel, MD (On-Site/Office)
About SITEC
SITEC is an employee and customer focused Information Technology and Professional Services Firm specializing in design, development, and delivery of state-of-the-art technology solutions, as well as cybersecurity, software and systems engineering services. SITEC provides support services as required for continuous operation of the Software Support Activity Software Production Facilities including complete lifecycle services for our customers platforms.
The pay for this position is competitive and commensurate with experience. Embrace this opportunity to showcase your expertise and contribute to our innovative projects. You will be given the opportunity to utilize great benefits such as Medical, Dental, Vision, 401(k), Life Insurance, Health Savings Account, Flexible Spending Account, Competitive Salary, and Paid Time Off. Are you ready to take the next step in your career with us? Apply now!
WHAT DOES AN INFORMATION SYSTEMS SECURITY ENGINEER DO?
Augment a well-established team as an Information Systems Security Engineer. This is a collaborative team environment that entails frequent interaction with customers. This is a fast-paced team so a willingness to take on challenges to creatively solve customer requirement problems will be required. The successful candidate for Information Systems Security Engineer will be self-motivated and will support new development work as well as sustainment activities.
Embrace the opportunity to showcase your Information Systems Security Engineer expertise and contribute to impactful projects with a forward-thinking team!
WOULD YOU BE A GREAT INFORMATION SYSTEMS SECURITY ENGINEER?
(ISSE) will perform and review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies. The successful candidate will validate and verify system security requirements definitions and analysis and establishes system security designs. Designs, develops, implements and/or integrates IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements. Builds IA into systems deployed to operational environments. Assists architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Agency security policy and enterprise solutions.
In addition, the ISSE will support the building of security architectures while enforcing the design and implementation of trusted relations among external systems and architectures. Assesses and mitigates system security threats/risks throughout the program life cycle. Contributes to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations. Reviews certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content. Applies system security engineering expertise in one or more of the following to : system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification; authentication; and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing. Support security authorization activities in compliance with Agency/CSS Information System Certification and Accreditation Process (NISCAP) and DoD Risk Management Framework (RMF), the NIST Risk Management Framework (RMF) process, and prescribed Agency/CSS business processes for security engineering.
Requirements
TS/SCI with Poly at time of application
Bachelor's degree in Computer Science, Information Assurance, Information. Security System Engineering, or related discipline from an accredited college or university is required. Four (4) years of ISSE experience may be substituted for a bachelor's degree.
Fourteen (14) years' experience as an ISSE on programs and contracts of similar scope, type, and complexity is required.
LEVEL 3 ISSE: Twenty (20) years' experience as an ISSE on programs and contracts of similar scope, and complexity is required.
Experience manually reviewing network diagrams, network device configurations, termination points for VPNs and working knowledge of software TLS security.
Maintain flexible and non-traditional Risk Management Framework (RMF) review of unclassified/classified networks to assess and prescribe countermeasures for secure communications.
Familiar with applying different security standards and frameworks. Ability to create security assessment reports, adhoc technical/administrative tasks, keen writing skills and leadership qualities.
Strong crypto, network and cloud computing background.
Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments
Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of IA architectures, systems, or system components
Participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of secure networking, computing, and enclave environments
Apply knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments
Interact with the customer and other project team members
Participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of IA architectures, systems, or system components
Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures
Support security planning, assessment, risk analysis, and risk management
Identify overall security requirements for the proper handling of Government data
Provide security planning, assessment, risk analysis, and risk management
Perform system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements
Recommend system-level solutions to resolve security requirements
Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures
Certifications
DoD 8570.01-M compliance with IASAE Level 2 is required
CISSP Certification is required.
Join our team today!
We believe in taking care of our team, both on and off the job. That's why we offer a mobile-friendly application process - because we know your time is valuable. If you're ready to take your skills to the next level and join a team that values hard work and good times, complete our application today!
SITEC is an employee and customer focused Information Technology and Professional Services Firm specializing in design, development, and delivery of state-of-the-art technology solutions, as well as cybersecurity, software and systems engineering services. SITEC provides support services as required for continuous operation of the Software Support Activity Software Production Facilities including complete lifecycle services for our customers platforms.
The pay for this position is competitive and commensurate with experience. Embrace this opportunity to showcase your expertise and contribute to our innovative projects. You will be given the opportunity to utilize great benefits such as Medical, Dental, Vision, 401(k), Life Insurance, Health Savings Account, Flexible Spending Account, Competitive Salary, and Paid Time Off. Are you ready to take the next step in your career with us? Apply now!
WHAT DOES AN INFORMATION SYSTEMS SECURITY ENGINEER DO?
Augment a well-established team as an Information Systems Security Engineer. This is a collaborative team environment that entails frequent interaction with customers. This is a fast-paced team so a willingness to take on challenges to creatively solve customer requirement problems will be required. The successful candidate for Information Systems Security Engineer will be self-motivated and will support new development work as well as sustainment activities.
Embrace the opportunity to showcase your Information Systems Security Engineer expertise and contribute to impactful projects with a forward-thinking team!
WOULD YOU BE A GREAT INFORMATION SYSTEMS SECURITY ENGINEER?
(ISSE) will perform and review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies. The successful candidate will validate and verify system security requirements definitions and analysis and establishes system security designs. Designs, develops, implements and/or integrates IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements. Builds IA into systems deployed to operational environments. Assists architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Agency security policy and enterprise solutions.
In addition, the ISSE will support the building of security architectures while enforcing the design and implementation of trusted relations among external systems and architectures. Assesses and mitigates system security threats/risks throughout the program life cycle. Contributes to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations. Reviews certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content. Applies system security engineering expertise in one or more of the following to : system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification; authentication; and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing. Support security authorization activities in compliance with Agency/CSS Information System Certification and Accreditation Process (NISCAP) and DoD Risk Management Framework (RMF), the NIST Risk Management Framework (RMF) process, and prescribed Agency/CSS business processes for security engineering.
Requirements
TS/SCI with Poly at time of application
Bachelor's degree in Computer Science, Information Assurance, Information. Security System Engineering, or related discipline from an accredited college or university is required. Four (4) years of ISSE experience may be substituted for a bachelor's degree.
Fourteen (14) years' experience as an ISSE on programs and contracts of similar scope, type, and complexity is required.
LEVEL 3 ISSE: Twenty (20) years' experience as an ISSE on programs and contracts of similar scope, and complexity is required.
Experience manually reviewing network diagrams, network device configurations, termination points for VPNs and working knowledge of software TLS security.
Maintain flexible and non-traditional Risk Management Framework (RMF) review of unclassified/classified networks to assess and prescribe countermeasures for secure communications.
Familiar with applying different security standards and frameworks. Ability to create security assessment reports, adhoc technical/administrative tasks, keen writing skills and leadership qualities.
Strong crypto, network and cloud computing background.
Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments
Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of IA architectures, systems, or system components
Participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of secure networking, computing, and enclave environments
Apply knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments
Interact with the customer and other project team members
Participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of IA architectures, systems, or system components
Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures
Support security planning, assessment, risk analysis, and risk management
Identify overall security requirements for the proper handling of Government data
Provide security planning, assessment, risk analysis, and risk management
Perform system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements
Recommend system-level solutions to resolve security requirements
Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures
Certifications
DoD 8570.01-M compliance with IASAE Level 2 is required
CISSP Certification is required.
Join our team today!
We believe in taking care of our team, both on and off the job. That's why we offer a mobile-friendly application process - because we know your time is valuable. If you're ready to take your skills to the next level and join a team that values hard work and good times, complete our application today!
group id: 10317185
