Information System Security Engineer (ISSE) / Cybersecurity Systems Engineer (TS Cleared)

Information System Security Engineer (ISSE) / Cybersecurity Systems Engineer (TS Cleared)

NTT DATA Services is seeking a Information System Security Engineer (ISSE) / Cybersecurity Systems Engineer (TS Cleared) to join our team in Quantico, Virginia (US-VA), United States (US). Job duties include managing, monitoring, and maintaining IT infrastructure to ensure system uptime and optimal performance, performing regular system backups, recovery procedures, and data management tasks, providing technical support and assistance to users, developing and maintaining system documentation, planning and implementing software updates, hardware upgrades, and migrations with minimal disruption to operations, providing technical support for systems and applications, monitoring and optimizing the performance of the infrastructure, developing and implementing backup and recovery strategies, ensuring compliance with security and regulatory standards, creating, modifying, disabling user accounts in accordance with account management procedures, monitoring and reviewing audit logs for suspicious activity, developing and/or updating standard operation procedures (SOPs) for all activities, collaborating and providing supporting artifacts and documentation to ISSO to support RMF process and ATO packages, planning, implementing, upgrading, or monitoring security measures for the protection of computer networks and information, possessing a strong understanding of the NIST Risk Management Framework, NIST Cybersecurity Framework, NIST Security and Privacy Controls for Information Systems and Organizations, Zero Trust Architecture, Standards for Security Categorization of Federal Information and Information Systems, and Minimum Security Requirements for Federal Information and Information Systems, possessing familiarity with STIG Viewer, SCAP Compliance Checker (SCC), and Visio applications, performing and reviewing Tenable Security Center scans, maintaining hardware/software lists, performing operating system, application, hardware/infrastructure, etc. hardening using DISA Security Technical Implementation Guidelines (STIGs) and/or SRGs as applicable for all appropriate systems, implementing the latest applicable Security Requirements Guide (SRG), STIG, and/or benchmarks, utilizing the latest Security Content Automation Protocol (SCAP) tool and manual SRGs, STIGs, and/or benchmarks, analyzing latest STIG updates on a minimum of a quarterly basis, collaborating with System Administrators, Network Operations, etc. to address system vulnerabilities, track progress and ensure security measures are implemented effectively, conducting security control assessments and validations of a system's technical and non-technical security features to mitigate known threats and vulnerabilities effectively, ensuring the completion of all necessary RMF products and reporting in accordance with policy and in collaboration with the Information System Security Officer/Security Control Assessor, assisting in updating any documentation related to risk assessments (such as Risk Assessment Reports, Plan of Actions & Milestones (POA&M), etc.) based on the results of assessments, conducting the necessary vulnerability analysis to facilitate the mitigation and determination of residual risk as required, providing support for the continuous monitoring program as needed, especially when System Level Continuous Monitoring results are essential to meet ongoing authorization requirements, assisting in contingency planning, testing, and execution as necessary, supporting the incident response process and actively participating in meetings with the program team, offering updates on project status.

Basic qualifications include a bachelor's degree in related fields (e.g. Computer Management Information Systems, Computer Science) or six (6) years applicable experience to include four (4) years of specialized experience. Minimum 5 years supporting Information Security roles/responsibilities as listed above. One or more of the following certifications: ISC2 CGRC, ISC2 SSCP, CompTIA CySA+, CompTIA Security+ CE, and/or ISC2 Certified in Cybersecurity Active Top Secret security clearance. Preferred qualifications include experience with BigFix, Nutanix, Splunk, Tenable Security Center, Security Compliance Checker, Security Technical Implementation Guide (STIG) Viewer, NMAP, Nipper, Wireshark, Microsoft Defender for Endpoint, RSA Authentication Manager, Microsoft Windows Active Directory, CISCO Firepower Management Center Microsoft Certified Professional (MCP), Cisco Certified Network Associate (CCNA), and/or VMware Data Center Virtualization Experience with Network Engineering or willingness to cross-train as a Network Engineer.