What are the responsibilities and job description for the Information Systems Security Engineer - Senior position at VTG?
Overview
TUNUVA Technologies (a wholly owned subsidiary of VTG) seeks to hire a Senior Information Systems Security Engineer to conduct information systems security engineering activities throughout the acquisition lifecycle. ISSEs are responsible for capturing and refining information protection requirements to ensure their integration into information systems acquisitions and information system development through purposeful security design or configuration. The contractor integrates security functional requirements into existing acquisition lifecycle phases, milestones, and documents using systems engineering principles, methods, concepts, and practices. Personnel shall be knowledgeable of best practices when implementing security controls including software engineering methodologies, security engineering methodologies, security engineering principles, and secure coding techniques, and coordinate activities with assessment and authorization (A&A) stakeholders.
What will you do?
Responsibilities
Do you have what it takes?
Requirements
Desired Qualifications
VTG's estimated starting pay range is $150,000-$159,000 annually, which is a general guideline for the geographic location. When extending an offer, VTG also considers work experience, education, skill level, market considerations and may possibly include contractual requirements which may cause an offer to fall outside of this range.
TUNUVA Technologies (a wholly owned subsidiary of VTG) seeks to hire a Senior Information Systems Security Engineer to conduct information systems security engineering activities throughout the acquisition lifecycle. ISSEs are responsible for capturing and refining information protection requirements to ensure their integration into information systems acquisitions and information system development through purposeful security design or configuration. The contractor integrates security functional requirements into existing acquisition lifecycle phases, milestones, and documents using systems engineering principles, methods, concepts, and practices. Personnel shall be knowledgeable of best practices when implementing security controls including software engineering methodologies, security engineering methodologies, security engineering principles, and secure coding techniques, and coordinate activities with assessment and authorization (A&A) stakeholders.
What will you do?
Responsibilities
- Collaborate with system stakeholders and teammates to enhance system security
- Communicate effectively with all security stakeholders
- Trace, define, and plan security control implementation based on functional requirements and system data types (i.e. system categorization, control tailoring, SCTM, and test plans)
- Review system security designs and architectures
- Advise system engineers (developers) on best methods to achieve risk reduction
- Create, revise, or review cybersecurity documentation
- Proactively identify opportunities for increasing customer value and engagement
Do you have what it takes?
Requirements
- Clearance: Active TS/SCI with Polygraph
- Currently hold or obtain and maintain DoD 8570 IAT-3 certification within 6 months of starting the position
- Bachelor's degree 6 years of experience OR High School/GED 10 years of experience OR Associate's degree 8 years of experience OR Master's degree or higher 4 years of experience
- Applicants should possess education and experience at the appropriate level for the position. Education in the following areas is considered relevant: computer engineering, information security, information management, and/or computer science. Education in the following areas is considered relevant: Computer science, computer engineering, or related field of study. Experience in the following areas is considered relevant: Information technology security, information systems security, information assurance engineering, performing certification & accreditation testing.
Desired Qualifications
- Knowledge of and experience with ICD 503 and NIST SP 800-37 Risk Management workflows
- Knowledge of and experience with systems engineering principles discussed in NIST SP 800-160 v1 and v2
- Proficient with server, desktop, and infrastructure hardware design and configuration for on-prem and their equivalents for cloud solutions
- Knowledge of system methodologies including client/server, web hosting, web content servers, policy servers, directory servers, firewalls, VPNs, VLANs, WAN, MAN, LAN, switches, routers, and Identity and Access Management (IAM)
- Experience configuring, and supporting virtualization technology, at a minimum, VMware, Xen, Hyper V, and cloud containers.
- Technical experience in configuring and hardening, at a minimum, Windows, Linux, and MacOS
- Experience in technical project management
- Technical experience in software engineering, program design and implementation, configuration management, system maintenance, integration testing, and information system engineering
- Experience in Digital Engineering or Model-Based Systems Engineering (MBSE) is a plus
VTG's estimated starting pay range is $150,000-$159,000 annually, which is a general guideline for the geographic location. When extending an offer, VTG also considers work experience, education, skill level, market considerations and may possibly include contractual requirements which may cause an offer to fall outside of this range.
Salary : $150,000 - $159,000