DHS Information Systems Security Engineer at RSSi / OneZero Solutions in Washington, DC, USA

Job description

• OneZero Solutions is on contract to provide division-wide support for Federal Information Security Modernization Act (FISMA) compliance, execution of the Risk Management Framework (RMF) process to achieve and maintain Authority to Operate (ATO) security authorizations, and deliver cyber security compliance for DHS operational mission systems. We are looking for personnel to support our DHS customer in achieving its mission of providing division-wide cyber security support for operational mission systems and assisting programs as they navigate the ATO process. The result of these efforts will be that the systems meet all the requirements for ATO approval before they are officially submitted to the Office of Chief Information Officer (OCIO).
• Qualified Parking Allowance: Employer may provide a monthly stipend or cover the cost of parking for employees who commute to government site by car.
• Lead the design, implementation, and testing of security controls for DHS systems and networks, applying advanced security principles and best practices.
• Conduct comprehensive security assessments and penetration testing, identifying vulnerabilities and recommending mitigation strategies.
• Configure and manage security appliances, firewalls, intrusion detection/prevention systems (IDS/IPS), and other security technologies.
• Develop and maintain secure network architectures and system configurations.
• Work with system owners and developers to integrate security controls into system development and implementation processes.
• Stay current with evolving security threats, vulnerabilities, and industry best practices.
• Contribute to the development and refinement of security engineering methodologies and procedures.
• Collaborate with ISSO and other DHS teams on incident response and remediation efforts.
• Mentor and guide junior ISSO staff, fostering professional development.

Responsibilities

• Lead the design, implementation, and testing of security controls for DHS systems and networks, applying advanced security principles and best practices.
• Conduct comprehensive security assessments and penetration testing, identifying vulnerabilities and recommending mitigation strategies.
• Configure and manage security appliances, firewalls, intrusion detection/prevention systems (IDS/IPS), and other security technologies.
• Develop and maintain secure network architectures and system configurations.
• Work with system owners and developers to integrate security controls into system development and implementation processes.
• Stay current with evolving security threats, vulnerabilities, and industry best practices.
• Contribute to the development and refinement of security engineering methodologies and procedures.
• Collaborate with ISSO and other DHS teams on incident response and remediation efforts.
• Mentor and guide junior ISSO staff, fostering professional development.

Requirements

• 12+ years of direct experience serving as an Information Systems Security Engineer (ISSE) within the DoD/Federal Government. Experience within the Intelligence Community and Law Enforcement is a strong plus.
• Proven track record of success in designing, implementing, and maintaining secure IT systems, demonstrating innovation, initiative, and problem-solving skills.
• In-depth understanding of information security principles and best practices, including network security, cryptography, system security, vulnerability management, and incident response.
• Expertise in security assessment methodologies and penetration testing tools.
• Proficiency in security technologies and protocols, such as firewalls, IDS/IPS, VPNs, encryption, and security information and event management (SIEM) systems.
• Experience with relevant security frameworks and standards, such as DoD STIG, NIST Cybersecurity Framework, FISMA, RMF, and DHS supplemental IA controls and security policies.
• Experience with OpenRMF is a strong plus.
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication skills.
• Ability to work independently and as part of a team in a fast-paced environment.
• Bachelor's degree and/or CRISC, GISP, CASP, CISSP, or other advanced security-related certifications
• Additional relevant experience may be considered in lieu of a degree.

Skills

Required

• Network security
• Cryptography
• System security
• Vulnerability management
• Incident response
• Security assessment methodologies
• Penetration testing tools
• Firewalls
• IDS/IPS
• VPNs
• Encryption
• SIEM systems