Information Security Engineer - TS/SCI and FS Poly

Information Security Engineer

Job Location: Reston, VA (Fully on-site) 

Job Salary: $203-219k

Hours: Flexible work hours

Requirements: TS/SCI & FS Poly clearances

Position Overview
We are looking for an Information Security Engineer to join our team for a development program that supports a cloud-based application and its related cloud infrastructure on a secure network. In this role, you'll work alongside a diverse team of developers, software engineers, database administrators, and system architects. The ISSE will be responsible for being on-call with a duty phone on a rotational schedule and may need to come in to handle urgent issues.

Key Responsibilities

• Conducting security analysis and monitoring of a fully AWS-based, cloud-based system.
• Identifying, selecting, implementing, and assessing security and privacy controls in line with NIST SP 800-53.
• Ensuring that security requirements are embedded into the System/Software Development Life Cycle (SDLC).
• Developing, establishing, and integrating secure configuration baselines based on DISA STIGs and CIS benchmark guidelines.
• Participating in the creation of secure architectures and designs.
• Performing Continuous Monitoring (ConMon) activities to meet Assessment and Authorization (A&A) requirements.
• Reviewing, creating, and maintaining relevant A&A artifacts.
• Carrying out vulnerability scanning and analysis of the system.
• Implementing remediation measures and developing security solutions based on findings.
• Collaborating with Information System Security Managers (ISSM) to develop and accredit the system.
• Participating in or leading technical exchange meetings, documenting meeting outcomes, and briefing management.

Required Qualifications:

• Hands-on experience with scripting and programming languages like BASH and Python.
• Typically requires a Bachelor of Science (BS) degree with relevant experience as follows:
  • Expert: 11-16+ years is ideal
• Hands-on experience with Linux (CLI).
• Solid understanding of, and experience with, networking (e.g., ports, routing tables, subnets, VPNs, firewalls, routers, etc.) including design, integration, and troubleshooting issues.
• Active TS/SCI with Polygraph.
• Experience in working on teams utilizing Agile workflows and processes.
• Strong understanding of NIST SP 800-37, NIST SP 800-53, NIST SP 800-160, DISA/CIS STIGs, and Common Vulnerabilities and Exposures (CVEs).
• Experience with RMF workflow tools.

Desired Qualifications:

• Experience with Infrastructure as Code (IaC) solutions such as Ansible/Terraform, or other configuration and automation tools.
• Experience working in a cloud-based environment (AWS).
• Strong communication and organizational skills.
• Relevant IT certifications (e.g., CISSP, AWS Cloud Practitioner, AWS Cloud Security).

Benefits

• Vacation - 5 weeks of accrued paid vacation per year (i.e., 8.33 hours accrued per pay period worked)
• Holidays - Paid holidays published annually by the Office of Personnel Management, excluding Inauguration Day
• 100% paid for Health Benefits* (United Healthcare, Guardian Dental, VSP Vision, MetLife, Life and Disability Insurance and annual $1500 employer HSA contribution on qualified plans) *health benefits kick in the 1st of the month following your start date
• 6% 401k Contribution (3% paid out during each pay period, the additional 3% will be paid out as a lump sum in Q1 each year) with immediate vesting
• Training Reimbursement - Approved training and education expenses will be reimbursed
• Technology Allowance

For this position you must be currently authorized to work in the United States. We do not sponsor for this position.