Senior Cyber Security Engineer/Information Systems Security Manager (ISSM)

Own Your Future. Modern Technology Solutions, Inc. (MTSI) is seeking a Senior Cyber Security Engineer/Information Systems Security Manager (ISSM) at JBAB, Washington D.C.

As a Senior Cybersecurity Engineer / Information Systems Security Manager (ISSM) with MTSI you will support a customer operating out of Joint Base Anacostia-Bolling (JBAB) in Washington, DC, with travel up to 20%, as required by the Government. The ISSM serves as the Program Office's information security professional responsible for conducting information system security engineering activities that capture and refine their requirements and ensures security is integrated into system and security architecture designs. The ISSM works with the systems engineering teams to incorporate cyber resiliency objectives, techniques, and design principles into all engineering and development efforts throughout the system development life cycle (SDLC).

Responsibilities

* Provide technical input, recommendations, and assistance with the implementation of both higher and granular-level cyber security approaches, methods and solutions that incorporate and maintain compliance to requirements resulting from laws, regulations, and other pertinent guidance.
* Advise the ISO and PSO concerning the impact levels for confidentiality, integrity, and availability for the customer's information systems.
* Evaluate threats and vulnerability to information systems to ascertain the need for additional safeguards.
* Review and approve information system security assessment plans which are comprised of SSPs, SCTMs, and Security Control Assessment Procedures.
* Ensure security assessments are completed for information systems.
* Prepare the final security assessment report (SAR) which includes assessment results and findings, at the conclusion of each security assessment activity.
* Initiate a POA&M with identified weakness and suspense dates for information systems based on findings and recommendations from the SAR.
* Evaluate security assessment documentation and provide written recommendations for security authorization to the AO.
* Develop recommendation for authorization and submit the security authorization package to the AO.
* Assess proposed changes to information systems, their environment of operation, and mission needs that could affect system authorization.
* Provide purposeful security architecting, design, development, and configuration of information systems.
* Provide inputs to development teams responsible for designing and developing organizational information systems and upgrading legacy systems.
* Employ best practices when implementing security requirements for information systems including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques.
* Keep abreast of current and new security technologies and threats.
* Design and develop security requirements that drive down risk while maintaining operational capability.

Qualifications

* 10+ years' technical experience in cybersecurity, information technology, or systems engineering.
* Certified Information Systems Security Professional CISSP or (CISSP-ISSEP/CISSP-ISSAP) required.
* Able to demonstrate understanding of cybersecurity needs of systems at varied stages of the SDLC.
* Firm understanding of the DoD 8500.1-M, DoDM 5205.07, Volume 1, Joint SAP Implementation Guide (JSIG), National Institute of Standards and Technology (NIST) Special Publication 800-53, Intelligence Community Directive (ICD) Number 503.
* Excellent oral and written communication skills, and ability to clearly translate client technical needs into technical specifications.
* Demonstrated ability to complete tasks, drive projects to closure, assimilate and correlate project information in a fast-paced environment.
* Demonstrated ability to assess and articulate risk, including to non-technical audiences.

Education Requirements:
* Bachelor's degree in engineering, computer science, cybersecurity, networking, or programming.

Clearance Requirements:
* Security Clearance Level Required: Must possess an active Top Secret security clearance, current within five (5) years, based upon a T5 or T5R investigation (formerly known as Single Scope Background Investigation (SSBI) or SSBI Periodic Review (SBPR)).

Please Note: U.S. Citizenship is required.