What are the responsibilities and job description for the Information Systems Security Engineer position at Base-2 Solutions, LLC?
Base-2 Solutions is seeking to hire an ISSO/ISSE familiar with software development, maintenance, system integration, and lifecycle support. Requires working knowledge of the NIST Risk Management Framework (RMF) along with customer tools/processes necessary to create, register, monitor, authorize, and maintain Information Systems.
Description
- Provide support to the Information System Owner (ISO) for maintaining the appropriate operational IA posture for a system/program/enclave.
- Provide support for implementing and enforcing information systems security policies, standards, and methodologies to meet customer specific requirements.
- Analyze scans and system alerts to develop/implement methodologies for incident/vulnerability detection, remediation, and reporting IAC customer specified requirements.
- Evaluate security solutions to ensure they meet customer specified security requirements.
- Develop and update System Security Plans (SSPs) and other IA documentation for Certification & Accreditation in accordance with specified policies.
- Provide support for security-relevant changes to information system resources and architecture.
Required Experience
- Fourteen (14) years of experience
- Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline from an accredited college or university is required. Four (4) years of ISSE experience may be substituted for a bachelor’s degree
- *Years of experience may be waived based on experience with the technologies listed above.
Required Skills
- Analyzes requirements, concept of operations documents, and high-level system architectures to develop system requirements specifications.
- Analyzes system requirements and leads design and development activities.
- Guides users in formulating requirements, advises alternative approaches, and conducts feasibility studies.
- Provides technical leadership for the integration of requirements, design, and technology.
- Incorporates new plans, designs and systems into ongoing operations.
- Present briefings and demonstrations to stakeholders.
- Must possess one active qualifying cert:
- CAP
- CASP CE
- CISM
- CISSP (or Associate)
- GSLC
- CCISO
- HCISPP
- CAP
