W

WOOD Consulting Services

Cybersecurity and intelligence technology

Information Systems Security Engineer

Full-TimeDeadline 9/7/27
$160k - $230k/yr
Expert
Bachelor's
Annapolis Junction, MD, USA
In Person
CybersecuritySecurity Engineering & Architecture
No H1B Sponsorship
US Citizenship, US Top Secret Clearance Required

About the job

Requirements
  • At least 12 years of experience working as an Information Systems Security Engineer on a large technical program.
  • Solid understanding of security practices and policies and hands-on vulnerability testing experience using customer tools.
  • Experience applying the Risk Management Framework.
  • Experience formulating and assessing information technology security policy.
  • Knowledge of and experience with Nessus, Nmap, Wireshark, hardware and software security implementation, communication protocols, encryption techniques and tools, and web services.
  • Experience with secure configurations of commonly used desktop and server operating systems.
  • Ability to work on multiple systems and components simultaneously in various configurations.
  • Strong verbal and written communication skills.
  • Ability to adopt and adhere to best practices.
  • Ability to plan and prioritize tasks and communicate clearly regarding technical options and trade-offs.
  • Ability to perform high-quality work independently and with a team in a fast-moving environment.
Responsibilities
  • Validate and verify system security requirements and establish system security designs for large-scale systems, major system elements, and interfacing systems in a complex network environment with geographically distributed components.
  • Identify and implement information security architectures and functionality to ensure uniform application of security policy and enterprise solutions.
  • Recommend and develop technical solutions, products, and standards based on current and desired system security architecture.
  • Assess and mitigate system security threats and risks throughout the program life cycle.
  • Lead or contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.
  • Collaborate with internal technical experts on a day-to-day basis.
  • Communicate with program managers and customer organization points of contact regarding significant security issues.
  • Participate in Program Increment Planning and related agile team activities.
  • Work with systems engineering, test engineering, and integration teams to ensure hardware and software architecture and implementation meet security requirements.
  • Analyze system implementations against security compliance policies and recommend and implement enhancements.
  • Evaluate security solutions to ensure they meet customer-specified information-processing requirements.
  • Evaluate the impact of new development on the operational security posture of the system.
  • Evaluate, review, and test critical software.
  • Propose, assess, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
  • Audit and assess system security configuration settings using common methodologies and tools.
  • Manage and enforce security strategies and policies affecting components of geographically distributed systems.
  • Provide configuration management for security-relevant information system software.
  • Serve as a subject matter expert in security architecture and advise program managers, customer technical experts, and internal program teams.
  • Formulate security compliance requirements for new system features.
  • Identify and remediate security issues throughout the system.
  • Support risk assessment, risk management, security control assessment, continuous monitoring, service design, and other information assurance program functions.
  • Work with development teams to improve understanding of vulnerabilities, attack vectors, and remediation approaches.
  • Plan and conduct security verification testing of relevant Type 1 devices.
Desired Qualifications
  • Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline.
  • Five years of experience with defense-in-depth principles and technology, including access control, authorization, identification and authentication, public key infrastructure, network security architecture, and enterprise security architecture, and applying risk assessment methodology to system development.
  • Department of Defense 8570 compliance with Information Assurance Systems Architect and Engineer Level 2 or 3.
  • Information Systems Security Engineering Professional certification.
  • Computer Information Systems Security Professional certification.
  • Experience developing or implementing integrated security services management processes, including network penetration testing assessment and auditing, antivirus planning assistance, risk analysis, and incident response.
  • Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls encompassing development, design, and implementation.
  • Experience with penetration testing tools.
  • Experience with scripting languages.

About the company

W

WOOD Consulting Services

View

WOOD Consulting Services provides cybersecurity, information technology and intelligence support for United States government missions. Its technical professionals work in areas such as software, systems engineering, cyber operations, cloud infrastructure and data analysis within secure customer environments. The company delivers through federal contracts that often require specialized experience and security clearances. WOOD is therefore best understood as a mission-focused government technology contractor, not a general management consultancy or a wood-products business. Public-service roles span administration, operations, technical work and direct community support.

Company Size

N/A

Company Stage

N/A

Total Funding

N/A

Headquarters

N/A

Founded

N/A