Information System Security Engineer (ISSE)

Формат работы

onsite

Тип работы

fulltime

Грейд

senior

Английский

Страна

Вакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:

TL;DR

Information System Security Engineer (ISSE) (Cybersecurity/RMF): Supporting DoD systems through the Risk Management Framework accreditation lifecycle with an accent on security assessments, vulnerability analysis, and compliance documentation. Focus on preparing eMASS packages, applying DISA STIGs and security frameworks, and designing countermeasures for secure networking and communications.

Location: On-site in Fort Meade, Maryland, United States

Company

hirify.global provides IT services in cybersecurity, Big Data and databases, software development, systems testing, STIG compliance training, physical security, and facilities support.

What you will do

Facilitate sub-projects through the Risk Management Framework accreditation lifecycle.
Perform security scans, technical assessments, risk analysis, and vulnerability identification across computing environments.
Review network diagrams, device configurations, VPN termination points, TLS security, VDI technologies, and secure communications solutions.
Apply CIS benchmarks, FIPS 140-2, DISA STIGs, SRGs, and CNSA cryptographic suite requirements.
Support the design and implementation of secure networks, computing environments, enclaves, IA architectures, trusted relationships, and system components.
Develop security requirements, accreditation documentation, mitigation strategies, and risk findings for Government systems.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
At least 7 years of experience in cybersecurity engineering, RMF/DIACAP accreditation, and DoD compliance documentation.
DoD 8140.03 / 8570.01-M certification baseline, such as Security+, CISSP, CISM, or an equivalent certification.
Expertise with DISA STIGs/SRGs, ACAS/HBSS vulnerability analysis, and eMASS package preparation.
Strong written and verbal communication skills, including accreditation documentation and presentations of risk findings to senior stakeholders.
Active Top Secret clearance required.

Nice to have

Master’s degree in Cybersecurity or a related discipline.
Experience supporting DISA programs and preparing for CCRI inspections.
Advanced certifications such as CISSP-ISSAP or CISM.

Culture & Benefits

Health, dental, vision, and life insurance coverage.
401(k) plan with company contribution.
Paid time off, paid holidays, and birthday PTO.
Tuition and education reimbursement.
Woman-owned, SBA Certified 8(a), and HUBZone company.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →