Information System Security Engineer

Cyber Defense Technologies (CDT) is currently seeking a skilled Information System Security Engineer to execute the implementation of security standards to a diverse set of systems. An advanced understanding of engineering principles and Security Technical Implementation Guides (DoD) is required. This position will be onsite in Chantilly, VA. Clearance Requirements: An active Top Secret/SCI with Full Scope Poly clearance is required. Applicants who do not meet these requirements will not be considered.

• Applies knowledge and understanding of Information Assurance (IA) concepts, practices, and procedures using established DoD security policies and standards to mitigate RMF security risks.
• Support the establishment of end-to-end Cyber Security processes and procedures to streamline AO/DAO approvals and to establish IT security standards in accordance with current DOD and IC policy guidance.
• Experience with administering, maintaining, implementing upgrades, and ensuring the readiness of several classified virtual enterprise systems and corresponding technologies (e.g. Enterprise Linux, Cisco Systems (Switch, Router, NGFW), Red Hat, Palo Alto, Windows Server, Windows Workstation).
• Identify and mapping NIST 800-53 controls, DISA Control Correlation Identifiers (CCI), and Security Requirements Guides (SRGs) families to appropriately tailor controls to submit new systems and capabilities for review by Authorizing Officials (AO).
• Ability to implement/engineer security safeguards (e.g. STIGs) on enterprise and embedded systems to a variety of hardware platforms.
• Perform appropriate continuous monitoring and systems security testing using tools such as Nessus Security Center/ACAS, and Splunk Enterprise.
• Implement security monitoring solutions as required to meet IA requirements for Risk Management Framework (RMF) as applies to systems and sensors allocated to regions/AORs as outlined by end customer & users.
• Assist with the client's progress towards completion of POA&Ms.
• Guide projects and programs through successful assessment and authorization of systems components for Authority to Operate (ATO).
• Perform system hardening utilizing STIGs.
• Focuses on threats, vulnerabilities, and the security of programs, systems, and devices.
• Provides special consideration for intrusion detection, identifying and mitigating vulnerabilities, and ensuring that remote access points are secure.
• Create security test cases and assist in the performance general security testing

• Experience with RMF process and requirements
• Heavy Security Technical Implementation Guide (STIG) experience
• Experience with Vulnerability Management (Nessus, NexPose, OpenVAS, etc)
• Translating technical customer requirements into business process and tasking

• 2+ years of experience as an ISSE
• 5+ years of experience in Information System Security
• Cyber Security Certifications desired (CISSP, CISM, CISA, CompTIA Security+, CEH etc.)

At CDT, we offer a collaborative and inclusive work environment where your expertise can help shape the future of cybersecurity and engineering solutions. Compensation and Benefits: Competitive salary based on experience. Comprehensive benefits package, including health, dental, and retirement plans. Opportunities for professional development and career advancement.

CDT is committed to hiring and retaining a diverse workforce. We are an Equal Opportunity employer making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.

If you are a proactive ISSE and thrive in dynamic environments, we encourage you to apply and join the CDT team