Information System Security Engineer

divh2Mid-Level/Senior Information System Security Engineer/h2pJoint Tactics and Technologies (JTT) is looking for motivated Mid-Level/Senior Information System Security Engineers in Philadelphia, PA We are a Service-Disabled Veteran Owned Small Business (SDVOSB) specializing in cybersecurity engineering. We offer outstanding benefits and opportunities for leadership development. This work is in support of Naval Surface Warfare Center Philadelphia./ppTasking includes:/pulliAssist with the developing, maintaining, and tracking Risk Management Framework (RMF) system security plans which include System Categorization Forms, Platform Information Technology (PIT) Determination Checklists, Assess Only (AO) Determination Checklists, Implementation Plans, System Level Continuous Monitoring (SLCM) Strategies, System Level Policies, Hardware Lists, Software List, System Diagrams, Privacy Impact Assessments (PIA), and Plans of Action and Milestones (POAM)./liliExecute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO)./liliIdentify and tailor IT and CS security control baselines based on RMF guidelines and categorization of the RMF boundary./liliPerform Ports, Protocols, and Services Management (PPSM)./liliPerform IT and CS vulnerability-level risk assessments./liliExecute security control testing as required by a risk assessment or annual security review (ASR)./liliMitigate and remediate IT and CS system level vulnerabilities for all assets within the boundary per STIG requirements./liliDevelop and maintain Plans of Actions and Milestones (POAM) in Enterprise Mission Assurance Support Service (eMASS)./liliDevelop and maintain system level IT and CS policies and procedures for respective RMF boundaries and/or guidance provided by the command ISSMs./liliImplement and assess STIG and SRGs./liliPerform and develop vulnerability assessments with automated tools such as Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP) Compliance Check (SCC) and Evaluate STIG./liliDeploy security updates to Information System components./liliPerform routine audits of IT system hardware and software components./liliMaintain inventory of Information System components./liliParticipate in IT change control and configuration management processes./liliUpload vulnerability data in Vulnerability Remediation Asset Manager (VRAM)./liliImage or re-image assets that are part of the assigned RMF boundary./liliInstall software and troubleshoot software issues as necessary to support compliance of the RMF boundaries assets./liliAssist with removal of SSD, HDD or other critical components of assets before destruction and removal from the RMF boundary./liliProvide cybersecurity patching of assets in times of DoD and DoN TASKORDs, FRAGORDs, or even designated by Command ISSM, ACIO, and/or Code 104 management./liliSupport configuration change documentation and control processes and maintaining DOD STIG Compliance./liliSupport cyber compliance of assets that are part of an enterprise IT network to include Windows server and CISCO networking hardware. This includes assessing vulnerabilities, patching and meeting requirements of the STIG for the hardware./li/ulpThe ideal candidate possesses the following:/pulliActive SECRET clearance./liliBachelors degree in computer science, information technology, or an equivalent technical degree from an accredited college or university./liliSeven (7) years professional experience capturing and refining information security operational and security requirements, and ensuring those requirements are properly addressed through purposeful architecting, design, development, and configuration; and implementing security controls, configuration changes, software/hardware updates/patches, vulnerability scanning, and securing configurations./li/ulpBenefits: 100% premiums paid on Health/Vision/Dental, PTO, 401K matching, certificate reimbursement, holiday bonus./ppThis position is contingent upon contract award./p/div