Information System Security Engineer

2 weeks ago


Washington, United States Coalfire - Federal Full time

About Coalfire

Coalfire Federal is a market leading cybersecurity consultancy firm that provides independent and tailored advice, assessments, technical testing and a full suite of cyber engineering services to Federal agency customers. Coalfire Federal along with its parent company, Coalfire, has an unparalleled client list with deep customer relationships with leading cloud and technology providers including Amazon, Microsoft, IBM, Google and Oracle and Federal agencies. Coalfire has been a cybersecurity thought leader for over 20 years and has offices throughout the United States and Europe and is committed to making the world a safer place by solving our clients’ toughest security challenges.

We’re on the lookout for an Information System Security Engineer (ISSE) / System Security Engineer to support our Federal team.

Location

Our clientele is largely in the government space, primarily within the Washington, D.C. / Maryland / Northern Virginia (DMV) areas. While we do offer opportunities that are remote, hybrid, or on-site - a position location and travel may vary based on client needs, and so local candidates may be preferred.

What you'll do
  • Provide security system engineering and security architectural design support services for Azure and custom application development (.Net, SharePoint, Python and Drupal).
  • Support identification and documentation of operations solutions in line with NIST security controls, and client requirements.
  • Create security rules (alerts) that trigger on anomalous activities or threat detections.
  • Development, deployment, or administration of VMware, RSA NetWitness, Cisco StealthWatch or similar tools.
  • Manage virtual server resources including performance, capacity, availability, serviceability, and recoverability.
  • Support the agency with meeting NIST SP 800-37 Risk Management Framework (RMF) requirements.
  • Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.
  • Support Configuration Control Board, and Technical Review board to review cybersecurity requirements and countermeasures for systems and/or applications.
  • Support cybersecurity testing and analysis of developed applications and/or systems.
  • Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities.
  • Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan.
  • Assess the effectiveness of cybersecurity measures utilized by system(s).
  • Design hardware, operating systems, and software applications to adequately address cybersecurity requirements.
  • Document and address organization's information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition life cycle.
What you'll bring
  • Experience working with cloud services such as AWS, Azure and O365 and cloud access security brokers.
  • Experience in the use of network monitoring tools with a strong understanding of network protocols.
  • Ability to perform security analysis, development and implementation of security policies, standards, and guidelines.
  • Ability to quickly explore, examine and understand complex security problems and how it affects a customer’s business.
  • Host/network access control mechanisms (e.g., access control list, capabilities lists).
  • Cybersecurity and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data.
  • Vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
  • Incident response and handling methodologies.
  • Intrusion detection methodologies and techniques for detecting host and network.
  • How traffic flows across the network (e.g., transmission control protocol [TCP] and internet protocol [IP], open system interconnection model [OSI], information technology infrastructure library, current version [ITIL]).
  • System and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, procedural language/structured query language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
  • System life cycle management principles, including software security and usability.
  • Information technology (IT) supply chain security and supply chain risk management policies, requirements, and procedures.
  • Critical infrastructure systems with information communication technology that were designed without system security considerations.
  • Network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
Education

Completed Bachelor’s degree from an accredited university is required, preferably in an IT related field.

Clearance / Suitability

Ability to obtain a clearance or a Public Trust is preferred, however all clearance levels and non-cleared applicants will also be considered.

Certifications

Our aim is to build a technologically diverse team - so while we don’t have a set list, there may be certain benchmarks we look for that apply to your expertise. We recommend checking out the DoD Approved 8570 Baseline Certifications as an example.

Preferred certifications typical for roles in our federal delivery services may include: CEH, CISA, CISSP, CISM, cloud certifications, or other industry recognized certification.

Years of Experience

At least 5 to 7 years of experience related to the qualifications above, including work with security monitoring tools such as IDS/IPS, FWs and NACs and protocols such as NetFlow (Snort, Bro, Palo Alto, Checkpoint, Cisco ISE, FireEye, Gigamon).

Bonus Points
  • Development, deployment, or administration of Splunk.
Why you'll want to join us

Our people make Coalfire Federal great. We work together on interesting things and achieve exceptional results. We act as trusted advisors to our customers and are committed to client-focused innovation as well as innovation in the industries that we serve.

Coalfire offers our people the chance to grow professionally with colleagues they like and respect while tackling challenges that stretch their minds and expand their skill sets. Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more.

You’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support memberships, and comprehensive insurance options.

Coalfire is an EEO employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

#J-18808-Ljbffr

  • Washington, United States TekSynap Full time

    Responsibilities & Qualifications RESPONSIBILITIES The Information Systems Security Engineer is expected to: Support Engineering and Operations network solutions and strategic adherence to all aspects of the Information Assurance (IA) program as stipulated by various U.S. Government requirements including (but not limited to): Director of Central...


  • Washington, Washington, D.C., United States ManTech Full time

    ManTech is seeking a highly skilled Cybersecurity Specialist to support the development of secure information systems and networks. The ideal candidate will have a strong background in cybersecurity principles and practices, with experience in designing and implementing secure architectures for complex systems.Key Responsibilities:Identify information...


  • Washington, United States ManTech Full time

    Information System Security Engineer (ISSO)ManTech is seeking a motivated, career and customer-oriented Information System Security Engineer (ISSE) to join our team in Washington DC.Responsibilities include, but are not limited to:Identify information protection needs for an IS and Network EnvironmentDefine IS and Network Environment security requirements in...


  • Washington, United States ManTech Full time

    Information System Security Engineer (ISSE)Currently, ManTech is seeking a motivated, career and customer-oriented Information System Security Engineer (ISSE) to join our team in Washington DC . Responsibilities include, but are not limited to: Identify information protection needs for an IS and Network EnvironmentDefine IS and Network Environment...


  • Washington, United States The Staffing Resource Group Inc Full time

    Job DescriptionSenior Information System Security Engineer (ISSE)Location: Washington, DC Industry: Dept. of Defense Salary: $117k-$172k Employment Type: Permanent Placement Clearance: Active TS/SCI clearance and US Citizenship Required Schedule: Monday to Friday, 8am to 5pm Summary: We are seeking a talented and motivated Senior ISSE to join our client s...


  • Washington, United States ManTech Full time

    Currently, ManTech is seeking a motivated, career and customer-oriented Information System Security Engineer (ISSE) to join our team in Washington DC. Responsibilities include, but are not limited to: Identify information protection needs for an IS and Network Environment. Define IS and Network Environment security requirements in accordance with applicable...


  • Washington, United States ManTech Full time

    Currently, ManTech is seeking a motivated, career and customer-oriented Information System Security Engineer (ISSE) to join our team in Washington DC . Responsibilities include, but are not limited to: Identify information protection needs for an IS and Network Environment Define IS and Network Environment security requirements in accordance with...


  • Washington, Washington, D.C., United States Praxis Engineering Full time

    Transformative Cybersecurity OpportunityAt Praxis Engineering, we're seeking a seasoned Cybersecurity Expert: Information Systems Security Engineer to spearhead the development of cutting-edge cybersecurity solutions.Your MissionAs a critical member of our team, you'll be responsible for safeguarding digital landscapes through technical security assessments,...


  • Washington, United States General Dynamics Information Technology Full time

    Type of Requisition:RegularClearance Level Must Currently Possess:Top Secret/SCIClearance Level Must Be Able to Obtain:Top Secret SCI + PolygraphSuitability:Public Trust/Other Required:NoneJob Family:Information SecurityJob Qualifications:Skills:Information Security, Information Security Management, Information System SecurityCertifications:Cisco Certified...


  • Washington, United States General Dynamics Information Technology Full time

    Type of Requisition:RegularClearance Level Must Currently Possess:Top Secret/SCIClearance Level Must Be Able to Obtain:Top Secret SCI + PolygraphPublic Trust/Other Required:NoneJob Family:Information SecurityJob Qualifications:Skills:Information Security, Information Security Management, Information System SecurityCertifications:Cisco Certified Network...


  • Washington, United States Edgewater Federal Solutions Full time

    Job DescriptionJob DescriptionEdgewater is currently seeking an Information Systems Security Engineer (ISSE) to support our federal customer in the Washington DC area.**This job is remote. That said, candidates who live in the DC Metro area and are open to 1 day every other week onsite for collaboration will be preferred.Responsibilities:Implement and...


  • Washington, United States General Dynamics Information Technology Full time

    Type of Requisition:RegularClearance Level Must Currently Possess:Top Secret/SCIClearance Level Must Be Able to Obtain:Top Secret SCI + PolygraphPublic Trust/Other Required:NoneJob Family:Information SecurityJob Qualifications:Skills:Information Security, Information Security Management, Information System SecurityCertifications:NoneExperience:2 + years of...


  • Washington, United States Avint Full time

    Are you passionate about protecting the digital world? Avint LLC is seeking a highly skilled and motivated Information Systems Security Engineer (ISSE) to join our team in Northern VA or New York. As our ISSE, you'll be responsible for safeguarding our systems, designing cutting-edge security protocols, and providing expertise to our clients. If you're ready...


  • Washington, Washington, D.C., United States Govcio LLC Full time

    Job Summary:GovCIO is seeking a highly skilled Information System Security Engineer to support our Information Assurance contract needs. This role will function as an integral member of our IA program team, providing security management oversight to all IA activities occurring within the program scope.Key Responsibilities: Provide security management...


  • Washington, United States VISTRADA Full time

    Job Posting: Security System Engineer (Junior/Intermediate/Senior Level) Vistrada is currently seeking highly skilled and motivated Security System Engineers to join our esteemed team. As a Security System Engineer, you will play a crucial role in identifying and mitigating vulnerabilities, ensuring the secure integration and operation of systems, and...


  • Washington, United States Booz Allen Hamilton Full time

    Your growth matters to us - explore our career development opportunities.A PLACE WHERE YOU BELONGBring your whole self to work in our culture of respect and inclusivity.SUPPORT YOUR WELLBEINGLearn how we’ll support you as you pursue a balanced, fulfilling life.YOUR CANDIDATE JOURNEYDiscover what to expect during your journey as a candidate with us.Key...


  • Washington, United States Booz Allen Hamilton Full time

    Job Number: R0207638Information Security Engineer, LeadKey Role: Support the development and implementation of information or Cybersecurity solutions in vulnerability management, network security, application security, and database security. Interface with senior client management as well as day to day client staff verbally and in writing. Help lead a team...


  • Washington, United States Data Intelligence, LLC Full time

    Data Intelligence is looking for an Information System Security Officer (ISSO) to work a HYBRID position located at the US Coast Guard Headquarters in Washington DC. Candidates must be knowledgeable of information technology and security principles. Job Responsibilities:Apply cyber security standards, directives, guidance and policies to classified computing...


  • washington, United States Data Intelligence, LLC Full time

    Data Intelligence is looking for an Information System Security Officer (ISSO) to work a HYBRID position located at the US Coast Guard Headquarters in Washington DC. Candidates must be knowledgeable of information technology and security principles. Job Responsibilities:Apply cyber security standards, directives, guidance and policies to classified computing...


  • Washington, United States Booz Allen Hamilton Full time

    Your growth matters to us - explore our career development opportunities.A PLACE WHERE YOU BELONGBring your whole self to work in our culture of respect and inclusivity.SUPPORT YOUR WELLBEINGLearn how we’ll support you as you pursue a balanced, fulfilling life.YOUR CANDIDATE JOURNEYDiscover what to expect during your journey as a candidate with us.Key...