Information Systems Security Engineer (ISSE)

Location: Norfolk, VA (Hybrid)

Employment Type: Contract to Hire

Employment Length: 6 Month (possible conversion based on performance)

Pay: $50 -$60 /hr

Job Description:

• Understanding of computer security and DoD Information Assessment & Authorization policies, DoD information security policies, relevant federal and private standards, requirements, Defense Information Systems Agency (DISA), National Institute of Standards (NIST) policies, Committee for National Security Systems (CNSS) policies, DoD/DON Communications Task Orders (CTO’s, TASKORD’s), and DoD Cybersecurity Vulnerability Messages (IAVM’s).
• DoD STIGs and SRGs, the DISA STIG Explorer and the use of STIG/SRG Applicability Guide and Collection Tool (SCAP Tool) results. Conversant with how to obtain the latest STIGs/SRGs, how to create STIG/SRG checklists and import SCAP Tool results to STIG/SRG Checklists, assess and document the automated and manual assessment results of SCAP Tool, requirements and how to document the results in the STIG/SRG checklists, draft proposed mitigations for non-compliant results, and develop POA&Ms to resolve the non-compliant results.
• Vulnerability analysis of information systems and identify, report, and resolve non-compliant cybersecurity controls.
• Ability to navigate Ports, Protocols and Services and DISA Connection Process Guide (CPG)
• Ability to recommend Cybersecurity solutions and controls to support requirements.
• Cybersecurity compliance and secure cyber posture with respect to availability, integrity, confidentiality, and authentication.
• Assessment and authorization packages.
• Development of authorization artifact documentation to include engineering documentation, network drawings, and related documentation as required by authorization standards.
• Configuration Management support.
• Ability to communicate clearly and succinctly in written and oral presentations.
• Technical Writing

Requirements:

• A bachelor's degree in in Science, Technology, Engineering, or Mathematics (or equivalent);
• Current recognized Cybersecurity certification with continuing education requirements and 2-5 years’ experience.
• IAM II certification
• Secret Clearance