Information Systems Security Engineer at SAIC

Reston, Virginia, United States -

Full Time

Start Date

Immediate

Expiry Date

15 May, 26

Salary

0.0

Posted On

14 Feb, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Vulnerability Evaluation, Firewall Deployment, Encryption, Security Policy Development, Cybersecurity Posture Implementation, Compliance, NIST 800-53, Risk Management Framework (RMF), Security Technical Implementation Guide (STIG), Security Test Procedures (STP), Risk Assessments, Vulnerability Assessments, Security Audits, Authorization to Operate (ATO), Vulnerability Scans, Configuration Management

Industry

Defense and Space Manufacturing

Description

SAIC is seeking a highly motivated, detail-oriented, and experienced Information Systems Security Engineer (ISSM) to join our lead systems integrator team in Reston, Virginia. The ISSE will be responsible for evaluating system vulnerabilities, deploying firewalls and encryption, monitoring for breaches, and developing security policies to ensure data integrity and confidentiality. The ISSE will implement the cybersecurity posture and ensure compliance of classified information systems in support of Department of the Air Force’s (DAF) Integrated Fires Command and Control (DIFC2) Program. The ideal candidate will have a strong technical background in information security and a thorough understanding of certification and accreditation process IAW NIST 800-53 and the Risk Management Framework (RMF). The successful candidate will have excellent communication, organizational and problem-solving skills. They will be expected to continually balance and adjust work priorities to meet short deadlines. The position is ONSITE in Reston, VA. Key Responsibilities: Develops and implements security designs to ensure that the operating systems and software applications adequately address cyber security requirements. Implement and validate Security Technical Implementation Guide (STIG) requirements and/or perform SRG assessments for all development and implementation projects. Develop Security Test Procedures (STP), conducts self-assessments to verify compliance with required configuration guidance and support assessment and authorization testing and validation of security designs. Perform risk assessments, vulnerability assessments, and security audits to identify system vulnerabilities and provide remediation strategies. Collaborate with Information Systems Security Managers (ISSMs) and stakeholders to address risk in compliance with customer standards. Monitor systems for compliance with government standards and evolving cybersecurity threats through vulnerability scans, compliance audits, and configuration management. Ensure all systems meet Authorization to Operate (ATO) requirements and maintain compliance throughout the system lifecycle. Ensure that cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations. Read and interpret dataflow, network, and other developmental diagrams effectively. Write and utilize documentation. Required Skills/Experience: Current Certification such as CASP+, CCNP Security, CISA, CISSP, CCSP. Hands-on experience with security tools, including encryption technologies, intrusion detection systems, and penetration testing tools. Experience working with cross-functional engineering and security teams in classified environments. Communicate effectively with multiple stakeholders. Bachelor’s Degree in Computer Science, Software Engineering or IT Engineering. 9 years of experience in Cybersecurity. Active TS/SCI or SCI eligible.

Responsibilities

The Information Systems Security Engineer will develop and implement security designs, validate STIG requirements, and perform security tests to ensure systems meet cybersecurity requirements. Responsibilities also include performing risk and vulnerability assessments, monitoring systems for compliance, and ensuring all systems meet Authorization to Operate (ATO) requirements.