Information Systems Security Engineer

Responsibilities

• Provide full life cycle DoD Risk Management (RMF) support
• Perform system scans of hardware/software builds using ACAS (or related tools)
• Assist in the Assessment & Authorization (A&A) process, supporting development of documentation required to obtain a system ATO.
• Develop Plans of Actions and Milestones (POA&Ms) to track vulnerabilities, correcting/mitigating discrepancies prior to release.
• Use the eMASS Information Assurance Compliance Tool to assure that deployed systems are properly configured and patched.
• Maintain the system’s Accreditation Package through continuous monitoring.
• Update and create documentation to support the baseline changes that occur throughout the system lifecycle in accordance with Department of Defense Instruction 8510.01, RMF for DoD IT procedure

Required Skills/Experience

• Bachelor’s degree in computer science, information technology, or an equivalent technical degree from an accredited college or university
• At least a secret level security clearance that is current and active
• Ability to work on-site in Philadelphia, PA
• At least seven (7) years professional experience with the following: Capturing and refining information security operational and security requirements Ensuring security requirements are properly addressed through purposeful architecting, design, development, and configuration Implementing security controls Configuration Changes Software/hardware updates/patches Vulnerability scanning Securing configurations
• Capturing and refining information security operational and security requirements
• Ensuring security requirements are properly addressed through purposeful architecting, design, development, and configuration
• Implementing security controls
• Configuration Changes
• Software/hardware updates/patches
• Vulnerability scanning
• Securing configurations

Required Certification