Information System Security Engineer Level III

Position Overview:
System High requires ISSE’s who are responsible for the design, development, implementation and/or Integration of the Information Assurance (IA) architecture, system, and system components for an IC client. They provide Information Technology security engineering, integration services, technical assessments, and solutions.

Duties & Responsibilities (but not limited to)

• Identifies information protection needs for enterprise Information Systems (IS)

• Define IS security requirements

• Develops and implements security designs for new or existing network systems; ensues that the design of hardware, operating systems, and software applications adequately address IA security requirements

• Assess threats to and vulnerabilities of IS

• Assess the effectiveness of information protection measures to IS

• Ensures identified security deficiencies are mitigated, corrected, or a risk acceptance has been obtained

• Participates in IS risk assessment and designs security countermeasures to mitigate identified risks

• Oversee and provide technical guidance to ISSE level 2s

• Documents system security design features and provides input to implementation plans and standard operating procedures

• Develop cybersecurity documentation in support of customer RMF process; IAW NIST SP 800-37

• Participate in IA Engineering Working Groups, ISSE forums, Integrated Product Teams, and provide IA guidance

• Ensure the rigorous application of IA control implementation, principles, and practices in the delivery of agency IT systems guided by IC and DoD security policies

Qualifications/Skills

• Ability to interface with clients and develop productive working relationships to meet mission objectives.

• Independent self-starter, proactive, professional, and assertive.

• Excellent organizational skills with the ability to handle multiple projects simultaneously.

• Strong communication and interpersonal skills; verbal and written.

• Demonstrate a high level of professional confidentiality.

• Available to work before/after typical office hours as requirements demand.

• Travel may be required.

• Desired Skills:

• Knowledge of and experience with ICD 503 and the Government’s certification and accreditation process

• System methodologies including: client/server, web hosting, web content servers, policy servers, directory servers, firewalls, WAN, MAN, LAN, switches, and routers

• Experience in technical project management (Level 3)

• Configuration and supporting Windows, Linux, Unix, Mac OS, VMware, Xen, and Hyper V

• Configuration and Management (Level 3)

• Integration Testing (Level 3)