Responsibilities

• Perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies.
• Validate and verify system security requirements definitions and analysis and establishes system security designs.
• Design, develop, implement and/or integrate IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements. Support the building of security architectures. Enforce the design and implementation of trusted relations among external systems and architectures. Assess and mitigate system security threats/risks throughout the program life cycle.

Apply system security engineering expertise in one or more of the following:

• system security design process
• engineering life cycle
• information domain
• cross-domain solutions
• COTS and GOTS cryptography
• identification, authentication, and authorization
• system integration
• risk management
• intrusion detection
• contingency planning
• incident handling
• configuration control and change management
• auditing
• certification and accreditation processes

Minimum Qualifications

• 20 years experience as an Information System Security Engineer
• Versed in principles of lA including confidentiality, integrity, non-repudiation, availability, and access control
• Experience supporting security authorization activities in compliance with:
• NSA/CSS Information System Certification and Accreditation Process (NISCAP)
• DoD Risk Management Framework (RMF)
• NIST Risk Management Framework (RMF)
• NSA/CSS business processes for security engineering.
• Experience interacting directly with the customer and other project team members
• Experience generating system-level solutions to resolve security requirements
• Experience developing functional and secure system architectural design plans
• Education and Experience Requirements
• Bachelor’s Degree in Computer Science, Information Assurance or Information Security System Engineering required
• Master’s Degree Computer Science, Information Assurance or Information Security System
• Engineering may be substituted for two (2) years of experience
• Four (4) years of additional ISSE experience may be substituted for a Bachelor’s degree

Certifications

• DoD 8570 compliance w/IASAE Level 3 required
• ISSEP or ISSAP Required
• CISSP Required