Cleared Information Systems Security Engineer (ISSE) *

Description

Are you looking to take the next steps in your career as an Information Systems Security Engineer (ISSE)? Let's chat and see if we are a good match!

Opportunity:

Virtual Service Operations is searching for an Information Systems Security Engineer (ISSE) to join our dynamic team in Lorton, Virginia. In this role, you will provide expertise in cybersecurity engineering with the following skills and responsibilities using technologies such as ePO, Splunk, ACAS, WSUS, Active Directory GPO’s and STIG/SCAP:

• Audit support responsibilities
• Analyze and report organizational security posture trends to the ISSM/ISSO.
• Analyze and report system security posture trends to the ISSM/ISSO.
• Apply security policies to meet security objectives of the system to the ISSM/ISSO.
• Assess adequate access controls based on principles of least privilege and need-to-know and reports findings to the ISSM/ISSO.
• Assess all the configuration management (change configuration/release management) processes and reports findings to the ISSM/ISSO.
• Assess the effectiveness of security controls and reports findings to the ISSM.
• Develop procedures and test fail-over for system operations transfer to an alternate site based on system availability requirements.
• Ensure all systems security operations and maintenance activities are properly documented and updated as necessary.
• Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level and reports findings to the ISSM.
• Implement security measures to resolve vulnerabilities, mitigate risks and recommend security changes to system or system components as needed.
• Implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.
• Mitigate/correct security deficiencies identified during security/certification testing and/or recommend risk acceptance to the ISSM.
• Plan and recommend modifications or adjustments based on exercise results or system environment.
• Properly document all systems security implementation, operations and maintenance activities and updates necessary.
• Provides cybersecurity recommendations to the ISSM based on significant threats and vulnerabilities.
• Verify and update security documentation reflecting the application/system security design features.
• Verify minimum security requirements are in place for all applications.
• Assists the ISSM/ISSO in identifying the security requirements for the system, including the confidentiality, integrity, and availability of data.
• Assists the ISSM/ISSO in describing and documenting the security controls that will be implemented to meet the security requirements.
• Assists the ISSM/ISSO in describing and documenting the procedures that will be used to manage security risks and incidents.
• Assists the ISSM/ISSO in describing and documenting how the security controls will be monitored and tested to ensure that they are effective.
• Assists the ISSM/ISSO in describing and documenting how changes to the system will be managed to minimize security risks.
• Assists the ISSM/ISSO in describing and documenting how the system will be recovered in the event of a security incident.
• Assists the ISSM/ISSO in the collection and organization of supporting documentation and diagrams needed for an Authority to Operate Package.
• Assists the ISSM/ISSO with conducting a security assessment of the system. This includes identifying the system's assets, threats, vulnerabilities, and risks.
• Assists the ISSM/ISSO with developing a risk management plan. This plan identifies the security controls that will be implemented to mitigate the risks to the system.
• Assists the ISSM/ISSO in writing the System Security Plan.
• Assists the ISSM/ISSO in reviewing and updating the System Security Plan.
• Assists the ISSM/ISSO in ensuring that the SSP is compliant with applicable DoD security policies and procedures.
• Monitors and investigates security breaches.
• Educates employees or clients about security procedures and programs.

Minimum Qualifications:

• Bachelor’s degree in Computer Science, Engineering, Business, or related field
• 5 - 8 years demonstrated performance in related technology
• Expertise in Cybersecurity Engineering
• Experience using technologies such as ePO, Splunk, ACAS, WSUS, Active Directory GPO’s and STIG/SCAP
• Experience with cloud computing
• At least one of the below certifications is preferred:

AZ-900 - Azure Fundamentals

AZ-500 – Azure Security Engineer Associate

SC-200 - Security Operations Analyst Associate

SC-900 – Security, Compliance, and Identity Fundamentals

SC-100 – Cybersecurity Architect Expert

Requirements

• Must be within driving distance of Edwards, CA OR willing to relocate there
• Must be willing to work onsite
• Must be willing and able to travel frequently
• Must possess an active TS/ SCI clearance or above
• Please note that pursuant to a government contract, this specific position requires U.S. citizenship status
• DoD 8570 IAT II is required

What is Important to Us:

• You are an excellent communicator in writing and speaking.
• You have the ability to work independently but also value teamwork.
• Your problem-solving skills are excellent.
• You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
• You seek a community of virtue-centered co-workers and clients.

What we offer you: As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates. This is a no-jerk zone. We provide ongoing learning and development opportunities to foster continuous growth. We offer competitive salaries, health benefits, and flexible work arrangements.

More About VSO: VSO is a hybrid cloud and managed services consulting firm. Much of VSO’s success can be attributed to our deep partnerships with IT services industry leaders such as AWS, IBM, Microsoft and others. VSO leverages numerous other partner relationships so as to provide our customers with optimal support. Additionally, we take pride in taking care of our employees. We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more! For more information, please visit our website at https://vso-inc.com/careers