Information Systems Security Engineer (ISSE)

ISSE Opportunity in Woburn, Massachusetts

We are recruiting for a terrific opportunity located in Woburn, Massachusetts for an ISSE to function as a key contributor for the Classified Cybersecurity Compliance team. In this dynamic position you will interface and collaborate with other Cybersecurity/Information Assurance (IA) professionals (ISSMs, ISSOs), Security professionals (CPSOs, FSOs), and System Administrators, on NIST compliance and configuration change management.

***No Relo

***Salary commensurate with experience.

Responsibilities:

• Assist ISSMs and ISSOs in monitoring and resolving Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities.
• Conduct both vulnerability and compliance scans of Information Systems.
• Conduct reviews/technical inspections to identify and mitigate potential security weaknesses and ensure that all security features applied to a system are implemented and functional.
• Implement Information Assurance and Information Security protections and requirements in program development and execution environments.
• Implement required security controls of networking devices, databases, operating systems, and hardware and software components.
• Perform other tasks as assigned by manager/supervisor.
• Review/manage various IA Vulnerability Alerts (IAVA) (i.e., US-CERT, etc.) and overall remediation.
• Support completion of Continuous Monitoring requirements IAW RMF and NIST SP800-53 requirements.
• Support the development of cybersecurity requirements, design, and architecture.
• Support the development of Risk Management Framework (RMF) documentation and control validation testing for Authority to Operate (ATO) accreditations.

Qualifications:

Requirements:

• Two (2) to Four (4) years of technical (hands-on) experience related to Information Assurance/Cyber Engineering requirements, development, and implementation.
• Ability to effectively prioritize multiple projects.
• Ability to work with people in a team environment and deal effectively with changing project priorities.
• Active Top Secret security clearance with the ability to obtain SAP and SCI access.
• Detail oriented and self-motivated.
• DoD 8570 IAM Level III certification (CISA, CISM, CISSP, etc.) or the ability to obtain within 6 months upon being hired.
• Excellent communication skills.
• Experience with configuration/certification and auditing/analysis of Windows/Linux operating systems and system virtualization in peer-to-peer, LAN & WAN networks.
• Experience with maintaining/managing Security Incident and Event Management (SIEM) and centralized auditing tools (i.e., Splunk, PowerStrux).
• Experience with managing and implementing DISA STIGs and benchmarks in a variety of operations systems (Windows, Linux, Ubuntu).
• Experience with NIST SP800-53 control implementation and assessment.
• Experience with various IA vulnerability/compliance scanning tools (e.g., NMap, ACAS, Nessus, Security Content Automation Protocol (SCAP).
• Familiarity with Microsoft Deployment Toolkit (MDT) and DISA Secure Host Baseline Framework.
• Familiarity with PowerShell scripting.
• Familiarity with the DCSA Authorization and Assessment Process Manual (DAAPM) and the Joint Special Access Implementation Guide (JSIG).
• Support hardening of new builds of Information Systems (IS) and ensure full functionality before deployment.

Why is This a Great Opportunity:

This is a growing company that continues to exceed in it's space. Great company benefits, highly competitive pay and a strong collaborative work environment.