ISSE
Core
Information security professional responsible for managing all aspects of an organization's information security system, including researching, testing, training, and implementing programs to safeguard sensitive information.
Role type
Senior IC Information Systems Security Engineer
Builds
Defense systems and mission IT solutions for national security
Domain
National Security / Cybersecurity / Systems Engineering
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Cybersecurity architecture, SDLC security integration, risk quantification, compliance monitoring, security documentation, change management, vulnerability assessment, cloud security, application security scanning, container security, fault tolerance and RMA analysis
Preferred skills
Special Access Programs (SAP) experience, polygraph clearance readiness, advanced programming (Java/Python/Ruby/C++), Linux expertise, virtualization and containers
Technologies
Arachni, OWASP ZAP, BurpSuite, Fortify, Checkmarx, Twistlock, ACAS, Nessus, EC2, Docker, RedHat/RHEL, CentOS
Responsibilities
Incorporate cyber resiliency objectives into system engineering and development efforts; Develop and maintain documentation and diagrams for security tools, system environments, and cloud operations; Perform requirements analysis, design, and integration for complex software applications and collaboration infrastructures; Participate in the change management process, including reviewing Change Requests and assessing security impact; Write implementation and design documents describing how security features are implemented; Create and maintain information system security documentation, SOPs, and provide guidance on POA&Ms; Conduct periodic and continuous monitoring of the system, procedures, and documentation to ensure compliance with the authorization package.
Seniority
Senior, hands-on IC