Information Systems Security Engineer with TS/SCI/FSP clearance - IMG Information Management Group, Inc.

Opportunity

IMG is seeking an experienced Information Systems Security Engineeer (ISSE) to support our mission-vital customer in Annapolis Junction, MD.

As a Information Systems Security Engineer/ISSE, you will leverage your technical expertise by reviewing technical security assessments of cloud-based and physical computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations and recommend mitigation strategies. You will also validate and verify system and cloud security requirements definitions and analysis, as well as establish system security designs. Job Responsibilities include:

• Assist in the design, development, implementation, and/or integration of IA and security systems and security components, including those for networking, computing, and enclave environments such as those with multiple enclaves and with differing data protection and classification requirements.
• Collaborate with cloud architects, software engineers, and system engineers to identify and implement the appropriate information security functionality to ensure uniform application of agency security policies and enterprise solutions.
• Contribute to the security planning, assessment, risk analysis, risk management, and certification and awareness activities for system and networking operations.
• Review accreditation and authorization documentation and provide feedback on completeness and content compliance.
• Participate in engineering teams for the design, development, implementation and or integration of IA architectures, systems, or system components.
• Support Government client in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
• Recommend system-level solutions to resolve and meet security requirements.
• Support the security authorization activities in compliance with the NSA/CSS Information System Certification and Accreditation Process (NISCAP) and DoD Risk Management Framework (RMF), the NIST RMF process, and prescribed NSA business processes for security engineering.

Qualifications

Clearance Required: TS/SCI with Full Scope Polygraph

Baseline Certification: CISSP or CASP certification is required.

Education/Experience: Fourteen (14) years experience as an ISSE on programs and contracts of similar scope, type, and complexity within the Federal Government is required. Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university is required. Four (4) years of additional ISSE experience may be substituted for a Bachelor’s degree.

Required Skills:

• Incident handling/management experience
• Good analytical skills
• Splunk or similar tool usage
• Good writing skills
• Understanding of system and application audit records

Desired Skills:

• Splunk dashboard building experience
• Splunk system management experience
• Splunk SPL experience
• Network Intrusion Detection System experience
• Windows, Linux, or Network administration experience
• Certified Ethical Hacker (CEH) certification
• Scripting knowledge
• Understanding of regular expressions

About IMG

Founded in 1987, IMG is a leading small business that exemplifies competence, integrity and follow-through. We consistently provide customer focused professional services, which ensures our company is recognized for continually exceeding expectations. We believe that at the core of our success stand our people. Our people have provided professional services in the Information Technology field for our customers with a commitment to customer satisfaction for more than 35 years.Information Management Group, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.