Information Systems Security Engineer (Hybrid), Northstrat, VA, US

Northstrat is seeking an experienced and driven Information Systems Security Engineer (ISSE). The candidate will perform system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements. The candidate should understand distributed architectures and cloud-based systems for big data applications. Must be local to Columbia, MD or Northern Virginia.

The ideal candidates shall possess a specific skill set beyond traditional compliance:

Technical Understanding:

• Candidates must be able to thoroughly understand how a system works from a technical perspective, rather than just a compliance-oriented one.

Effective Communication:

• They should be able to clearly relay this technical understanding to a less technical audience (e.g., other traditional RMF roles).

• We are not looking for compliance-only ISSEs for our current roles.

Addressing Current Challenges

We often need to deploy highly technical resources for routine security engineering activities to help build the Body of Evidence (BOE) and defend the security posture of the data systems we build and manage for the Government. Our goal is to:

• Reduce our reliance on these highly technical personnel for routine tasks.

• Utilize them more effectively for their intended purpose: Subject Matter Expert (SME) support.
• Will create, review and edit authorization documentation for completeness and accuracy in accordance with federal and DoD policy.
• Thoroughly understand and be able to implement DoD RMF system accreditation processes.
• Assess use case and operational risk of integrated open source, and GOTS/COTS software components.
• Will use vulnerability management systems, automated security scanning tools, and system accreditation record systems.
• Must be able to grasp new concepts, facilitate information exchanges for data gathering, and collaborate with diverse audiences.
• Will follow established processes where applicable and establish and execute defensible processes where none are prescribed.
• Provide security planning, assessment, risk analysis, and risk management support.
• Recommend system-level solutions to resolve security requirements and guide the development team in meeting the security posture requirements.
• Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
• Must apply existing knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments.
• Must be able to interact well with others to complete work.
• Technical proficiency across technologies is paramount.