Senior Information Systems Security Engineer (ISSE)
The Senior Information Systems Security Engineer (ISSE) supports system authorization and accreditation for DoD weapon systems using the Risk Management Framework (RMF). The role involves developing security strategies, assessing vulnerabilities, and ensuring compliance with DoD and Air Force policies.
- Compensation
- $178K–$198K / yr
- Location
- Bedford, Massachusetts, United States
- Work setup
- Onsite
- Seniority
- Senior
- Employment
- Full time
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- US citizenship
- Active Top Secret Security Clearance
- BA/BS Degree with 15 years of Cyber-Security experience and 5 years DoD experience
- MA/MS Degree with 12 years of experience and 5 years DoD experience
- 20 years of directly related experience with 8 years in DoD
- DoD 8570.01 MMGT512 compliant certification
- Experience with Risk Management Framework (RMF)
Full description
Applied Research Solutions is seeking a Senior Information Systems Security Engineer (ISSE) candidate located at Hanscom AFB, Bedford, MA. This role requires a Top-Secret Clearance and the employee to pass background screening for SAP.
Applied Research Solutions (ARS) is respected as a world-class provider of technically integrated solutions as we deliver premier talent and technology across our focused markets for unparalleled, continuous mission support. Awarded a Best Places to Work nominee since 2020, ARS recognizes that without our career- driven, loyal professionals, we would not be able to deliver state-of-the-art results for our mission partners. We firmly believe that prioritizing our employees is of the upmost importance. We provide a culture where our employees are challenged to meet their career goals and aspirations, while still obtaining a work/life balance. ARS employees are motivated through our industry competitive benefits package, our awards and recognition program, and personalized attention from ARS Senior Managers.
Responsibilities include:
- Support the system/application authorization and accreditation (A&A) effort for weapon systems and PIT Systems, to include assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts mandated by governing DoD and Air Force policies (i.e., Risk Management Framework (RMF). Understanding of how RMF intersects with the acquisition process and how it’s used to generate requirements; how RMF and Cybersecurity should be covered in contracts – requirements, deliverables, PWS/SOW language. Understanding how to work through RMF and controls with a program to establish appropriate levels of risk based on program lifecycle and mission requirements.
- Recommend policies and procedures to ensure the reliability of and accessibility to information systems and to prevent and defend against unauthorized access to systems, networks, and data.
- Develop, execute, and track the performance of security measures to protect information and network infrastructure and computer systems.
- Review and assess architectures and recommend cybersecurity strategies to developmental and legacy system designs.
- Assess threats to determine impact and recommend corrective actions to program managers to reduce risk.
- Translate program/system requirements into technical requirements and architectures needed to meet program objectives.
- Life cycle development Promote awareness of security issues among management and ensuring sound security principles are reflected in program’s’ visions and goals. Participate in systems design.
- Understanding of DevSecOps environments to check for security flaws and vulnerabilities during code review.
- Understanding of operating systems including Linux, Ubuntu, IoT systems, ZTA environments and Cloud development.