Information Systems Security Engineer
Isse
Posted on 12/29/2022
INACTIVE
Novetta

201-500 employees

AI-driven data insights
Company Overview
Novetta's mission is to bridge the gap between what our customers can currently do and what they aspire to achieve by solving problems of national significance.
Data & Analytics
AI & Machine Learning
Aerospace

Company Stage

N/A

Total Funding

N/A

Founded

2012

Headquarters

McLean, Virginia

Growth & Insights
Headcount

6 month growth

-7%

1 year growth

-15%

2 year growth

-48%
Locations
Eglin AFB, FL, USA
Experience Level
Entry
Junior
Mid
Senior
Expert
Desired Skills
Communications
AWS
Splunk
Linux/Unix
Requirements
  • DoD 8570 IAT Level II certification or higher (Sec+, CISSP, CASP, etc.)
  • 5+ years of implementing NIST 800-53, Rev 4 and the Risk Management Framework (RMF)
  • 5+ years of experience with Windows and Linux environments
  • 5+ years of experience with virtualization or cloud environments
  • 2+ years of using information security and assurance practices and principles
  • An active TS/SCI clearance is required to start
Responsibilities
  • The ISSE will work as part of a team reviewing and assessing Risk Management Framework (RMF) authorization body of evidence for classified information systems, to include: System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Continuous Monitoring Plan, Incident Response Plan, Access Control Plan, Security Assessment Plan, etc
  • Review new and existing systems for technical compliance with IA directives and protection of data at all classification levels including SCI. Advise on in-depth security design review and threat/risk assessments
  • Provide inputs to technical artifacts, including Plans of Action and Milestones (POA&Ms), Security Control Traceability Matrices (SCTM), and Risk Assessment Reports (RARs)
  • Conduct site visits and assessments to inspect IA plans and security control implementations and support Incident Response Team (IRT) activities
Desired Qualifications
  • Other Security related certification (Cloud, SIEM, forensics, Linux, Windows, etc)
  • Experience working in a DevSecOps project environment
  • Formerly or currently a system administrator, developer, or engineer
  • Experience with MS Active Directory, Splunk, ACAS/Nessus, McAfee, Windows, Linux, AWS Security, etc
  • Strong verbal and written communication skills. Able to engage with users in a professional manner and present technical concepts plainly to semi-technical customers. Ability to interface with seasoned Government personnel
  • Ability to work in a matrixed team environment and support multiple different efforts as needed
  • Desire to learn new technologies and tools and willing to share your experience with the team
  • JSIG or ICD 503 compliance