Information System Security Engineer (ISSE)

Description of Task to be Performed:

AnaVation is looking for a dedicated Information System Security Engineer (ISSE) to join our team.

This position is part of a talented technical team responsible for the ongoing development, operations, and maintenance of several networked systems supporting digital forensic investigations. These systems primarily run on Windows and utilize virtual and cloud environments.

The ideal candidate must be a self-starter with strong work habits, capable of completing tasks independently while also working effectively as part of a team. Candidates should have demonstrated career experience as an Information System Security Officer (ISSO) or Information System Security Engineer (ISSE) and experience with the Federal Authority to Operate (ATO) process.

The ISSE will provide senior-level capabilities in information system security and apply current Information Assurance (IA) technologies to the architecture, design, development, evaluation, and integration of applications, systems, and networks to maintain the overall system security posture.

The ISSE will:

• Develop compliance and standardization practices aligned with customer policies for various information systems.
• Work closely with Government customers to ensure the confidentiality, integrity, and availability of systems, applications, networks, and data.
• Support the planning, analysis, development, implementation, maintenance, and enhancement of:
  
  
  
  • Information systems security programs
  • Infrastructure and applications
  • Security Assessment and Authorization (SAA)
  • IA Policy Directives (PDs) and Policy Guides (PGs)
  • IA security tools such as Tenable.io, Nessus Pro, Nmap, and related technologies
  
  
  
  

• Ten (10) years of experience performing security requirement analysis, system design, of computer systems.
• Bachelor of Science degree in Computer Security or a related field. In lieu of education, an additional five (5) years of experience is required.
• Experience in a cyber-risk and compliance management system (e.g., Xacta, RiskVision, etc.)
• One (1) year experience or more configuring, performing, scheduling, reviewing, and assessing vulnerability (i.e., patches, updates, etc.) and compliance (i.e., Security Content Automation Protocol (SCAP) and/or Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG)) scans on the infrastructure and applications to ensure patch and configuration
• Technical background that will assist in assessing the NIST SP 800-53 security controls and gather evidence to support conclusions
• Knowledge of operating systems, network and application security to aid implementation of information security and assurance principle
• Knowledge of SPLUNK software and tools.
• Active Top-Secret clearance and the ability to successfully pass a polygraph and obtain SCI accesses.

• Deep understanding of AWS and Azure cloud platforms, including cloud security and resource management.
• Understanding of AI/LLM technology and use cases (copilot, chatGPT, claude etc)
• Security related certification such as:
  
  
  
  • CompTIA Security+
  • CompTIA Advanced Security Practitioner (CASP+)
  • Cisco Certified Cybersecurity Professional (CCCP)