Information System Security Engineer - United States - 25566 - Maximus

General information

Job Posting Title

Information System Security Engineer

Date

Monday, October 7, 2024

City

Arlington

State

Country

United States

Working time

Full-time

Description & Requirements

Maximus is seeking a highly skilled Information Systems Security Engineer (ISSE) with specialized expertise in Everfox to join our team in Arlington, VA.

The ideal candidate will excel in the technical aspects of security, including the design, implementation, and maintenance of security solutions within a highly classified hybrid environment. This role requires a deep understanding of the configuration and management of security tools in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG). The successful candidate will be a proactive problem-solver, an effective communicator, and a collaborative team player dedicated to maintaining robust security postures.

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS034, T4, Band 7

Key Responsibilities:

• Technical Security Expertise:

- Provide technical expertise in the design, implementation, and maintenance of security solutions.

- Ensure that security measures are integrated into the information system throughout its lifecycle.

• Configuration and Management of Security Tools:

- Configure, administer, and maintain security tools, including Everfox, ACAS, Splunk, Enterprise Security Suite (ESS), and other cyber tools to ensure compliance with security policies and standards.

- Implement and manage Security Technical Implementation Guides (STIGs) and other security configurations in accordance with the JSIG.

- Operate and maintain (O&M) security assets, including Security Information and Event Management (SIEM) systems, Intrusion Detection Systems (IDS), Data Loss Prevention (DLP) tools, and security audit log repositories and databases.

• Collaboration and Support:

- Work closely with the Information System Security Manager (ISSM), Information System Security Officer (ISSO), and other stakeholders to ensure that security measures align with overall security policies.

- Support Cyber Analysts by providing technical configurations and data necessary for security assessments and incident response.

- Support detailed reporting and documentation of security assessments, configurations, and incidents.

• Documentation and Compliance:

- Generate and maintain documentation required for RMF processes, including SOPs, security plans, risk assessments, and Plans of Action and Milestones (POA&M).

- Ensure compliance with JSIG and other relevant security standards and policies.

• Continuous Improvement and Training:

- Stay updated with the latest security trends, tools, and best practices.

- Continuously improve security measures and practices to address emerging threats and vulnerabilities.

- Provide training and guidance to team members on security tools and practices.

Minimum Requirements:

• Per contract requirements candidates must possess an active TS/SCI clearance with the ability to obtain CI Poly.

• A Bachelor’s degree in a relevant field (e.g., Computer Science, Information Systems Management, Engineering) is required for this position. 4+ years of relevant work experience may be considered in lieu of the degree requirement.

• 8+ years of experience in cybersecurity or a related field.

• 2+ years of experience displaying strong knowledge of operating systems (e.g., Windows, Linux).

• 2+ years of cybersecurity experience in the Department of Defense (DoD) or Intelligence community.

• Strong knowledge of cybersecurity principles, tools, and techniques.

• 2+ years of experience as a Cyber or Security Analyst for federal information systems.

• Strong familiarity with the Risk Management Framework (RMF), and National Institute of Standards and Technology (NIST) FIPS 199/200 and Special Publications.

Desired Skills & Qualifications:

• IAT level III certification (CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH), or ability to obtain certification within six months of hiring.

• Experience with the Special Access Programs (SAPs) and Intelligence Community (IC).

• Knowledge of Splunk and and/or the Everfox suite of tools a plus.

• Experience as a Cyber or Security Analyst for federal information systems.

• Knowledge and/or understanding of Joint Special Access Program Implementation Guide (JSIG)

• The ability to adapt in fast-paced environments, comfort with ambiguity.

• Familiarity with cloud technologies, security practices, and agile methodologies.

• Strong self-organization and self-management skills with emphasis on self-initiation and follow through.

• Proven written and oral communication skills.

• The ability to work independently.

#techjobs #clearance

Minimum Requirements

TCS034, T4, Band 7

EEO Statement

Active military service members, their spouses, and veteran candidates often embody the core competencies Maximus deems essential, and bring a resiliency and dependability that greatly enhances our workforce. We recognize your unique skills and experiences, and want to provide you with a career path that allows you to continue making a difference for our country. We’re proud of our connections to organizations dedicated to serving veterans and their families. If you are transitioning from military to civilian life, have prior service, are a retired veteran or a member of the National Guard or Reserves, or a spouse of an active military service member, we have challenging and rewarding career opportunities available for you. A committed and diverse workforce is our most important resource. Maximus is an Affirmative Action/Equal Opportunity Employer. Maximus provides equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disabled status.

Pay Transparency

Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.