W

WOOD Consulting Services

Cybersecurity and intelligence technology

Information Systems Security Engineer – Mid or Senior

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeAnnapolis Junction, MD, USA$160k - $230k /yr

About the Job

Requirements

  • At least 12 years of experience working as an Information Systems Security Engineer on a large technical program.
  • A solid understanding of security practices and policies, and hands-on vulnerability testing experience using customer tools.
  • Experience applying the Risk Management Framework.
  • Experience formulating and assessing information technology security policy.
  • Demonstrated knowledge of and experience with common security tools such as Nessus, Nmap, and Wireshark; hardware and software security implementation; communication protocols; encryption techniques and tools; and web services.
  • Experience with secure configurations of commonly used desktop and server operating systems.
  • Ability to work on multiple systems and components simultaneously in various configurations.
  • Strong verbal and written communication skills.
  • Commitment to adopting and adhering to best practices.
  • Ability to effectively plan and prioritize tasks and clearly communicate technical options and trade-offs.
  • Ability to perform high-quality work independently and with a team in a fast-moving environment.

Responsibilities

  • Validate and verify system security requirements and establish system security designs for large-scale systems, major system elements, and interfacing systems within complex network environments with geographically distributed components.
  • Identify and implement appropriate information security architectures and functionality to ensure uniform application of security policy and enterprise solutions.
  • Recommend and develop technical solutions, products, and standards based on current and desired system security architecture.
  • Assess and mitigate system security threats and risks throughout the program life cycle.
  • Lead and contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.
  • Collaborate day to day with internal technical experts.
  • Communicate with Program Managers and customer-organization points of contact about significant security issues when necessary.
  • Participate in Program Increment Planning and related agile team activities.
  • Work with System Engineering, Test Engineering, and Integration teams to ensure hardware and software architecture and implementation meet security requirements.
  • Analyze and assess system implementation against security compliance policies and recommend and implement enhancements.
  • Evaluate security solutions to ensure they meet customer requirements for processing information.
  • Evaluate the impact of new development on the system's operational security posture.
  • Evaluate, review, and test critical software.
  • Propose, assess, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
  • Audit and assess system security configuration settings using common methodologies and tools.
  • Manage and enforce security strategies and policies affecting components of geographically distributed systems.
  • Provide configuration management for security-relevant information system software.
  • Serve as a security architecture subject matter expert, advising Program Managers, customer technical experts, and internal program teams.
  • Formulate security compliance requirements for new system features.
  • Identify and remediate security issues throughout the system.
  • Support risk assessment, risk management, security control assessment, continuous monitoring, service design, and other information assurance program functions.
  • Work with development teams to improve team-wide understanding of vulnerabilities, attack vectors, and remediation approaches.
  • Plan and conduct security verification testing of relevant Type 1 devices.

Desired Qualifications

  • A Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline.
  • Five years of experience with Defense in Depth principles and technology, including access control, authorization, identification and authentication, public key infrastructure, network and enterprise security architecture, and applying risk assessment methodology to system development.
  • Department of Defense 8570 compliance with Information Assurance Systems Architect and Engineer Level 2 or 3.
  • Information Systems Security Engineering Professional certification.
  • Certified Information Systems Security Professional certification.
  • Experience developing or implementing integrated security services management processes, such as assessing and auditing network penetration testing, antivirus planning assistance, risk analysis, and incident response.
  • Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls covering development, design, and implementation.
  • Experience with penetration testing tools.
  • Experience with scripting languages.

About the Company

WOOD Consulting Services

Cybersecurity and intelligence technology

WOOD Consulting Services provides cybersecurity, information technology and intelligence support for United States government missions. Its technical professionals work in areas such as software, systems engineering, cyber operations, cloud infrastructure and data analysis within secure customer environments. The company delivers through federal contracts that often require specialized experience and security clearances. WOOD is therefore best understood as a mission-focused government technology contractor, not a general management consultancy or a wood-products business. Public-service roles span administration, operations, technical work and direct community support.

Company size
Not listed
Company stage
Not listed
Total funding
Not listed
Headquarters
Not listed
Founded
Not listed

Recently Posted Jobs

Explore more opportunities at WOOD Consulting Services

See more jobs