Job details
Job type full-time
Full job description
Information security engineer
Location: other/client site - usss headquarters, 950 h street nw, washington, d.c20223 and other facilities located within the washington d.cMetropolitan areaLargely remote during covid.
Department: dhs - u.sSecret service (usss) enterprise cybersecurity services (ecs)
Type: full time
Minimum experience: experienced
Security clearance level required: dhs suitability required
The clearance level stated above must be met for consideration for this specific opportunityUnfortunately, ftc is unable to sponsor at this time.
Military veterans and individuals with disabilities are encouraged to apply!
*
Favor techconsulting, llc (ftc)* is seeking talented information security engineers with extensive government experience.
Essential duties & responsibilities
*
Role overview: *
The information security engineer will support usss it systems.
*
Responsibilities: *
Review, analyze, and report on technical, operational, and management level deficiencies as outlined in nist special publication 800-53 revision 4 and 5.
Determine the baseline it security requirements for it systems by, identifying the system boundary, and determining the system and information categories and assisting in completing the fips 199.
Select the baseline security controls for the it system, using archer, and tailoring where appropriate.
Implement security controls based on the it system(s) fips categorization.
Work closely with the information system business owner (isbo) to identify any additional controls that are applicable to the system to maintain a favorable security posture.
Assist security testers in the development of the security assessment plan (sap), as required and in preparation for the security control assessment (sca).
Provide oversight and advisement on all proposed change requests on an it system as it pertains to the potential change to the existing controls assessment.
Work with auditors to identify key controls which must be assessed on a recurring annual basis.
Evaluate and provide advisement on all privileged access requests to it systems.
Ensure software targeted for introduction to the production environment is evaluated and provide guidance regarding the potential for the software to introduce risk into the environment.
Support the security incident response (ir) team in the remediation, documentation and reporting of all incidents for the isso assigned system.
Track and report security requirements throughout the project life cycle of all projects that are within the accreditation boundary of their assigned system.
Provide oversight and guidance regarding requests to modify technical policies such as firewall rules, ports, protocols, etcFor each it system.
Continuously maintain a thorough understanding of all configurations, architecture, installed software, accounts (both operating system and application), data flows, ports, protocols, and other relevant data for each it system.
Coordinate with the appropriate operational group to accurately update the system design document for each it system to reflect the approved state of each it system.
Conduct technical security testing and assessments for all systems (new or existing) within the usss’s environment to include:
Penetration testing
Secure/software code analysis
Database security testing
Vulnerability assessments
Cloud security testing
Compliance/configuration assessments
Security control assessments, utilizing nist sp 800-53a
Application security assessments
Provide information security continuous monitoring (iscm) services for systems in continuous monitoring, activities include:
Test and update the security assessment detail for assigned systems on the intervals defined within the usss’s iscm guidance and nist sp 800-53a.
*
Required skills & experience*
*
Bs in computer science, information technology, or related field
3 years of cybersecurity experience
Iat level iii (casp, ce, cisa, or cissp)
Experience working with system stakeholders to assess and manage system cybersecurity risk
*
Professional certification(s): *
N/a
*
Formal education: *
N/a
*
Years of professional experience: *
N/a
*
Desired skills & experience*
*
Skill and experience using splunk to analyze data for anomalies and trends; capability to build splunk dashboards highlighting key trends of the data.
Skill and experience using forescout and other network defense tools
Skill and experience with qualys, tenable nessus, and other systems and network vulnerability scanning tools
Experience with governance, risk, and compliance (grc) tools: csam, archer, emass
Skill and experience conducting penetration testing
Skill and experience performing secure/software code analysis
Skill and experience with database security testing
Skill and experience with cloud security testing
*
Professional certification(s): *
N/a
*
Formal education: *
N/a
*
Years of professional experience: *
N/a
*
Physical requirements*
*
U.sCitizenship
*
Additional information: *
U.s citizenship is required for this specific opportunity and all selected applicants will be subject to a government security investigationThis includes but not limited to; meeting the eligibility requirements for access to classified information and the ability to obtain a government-granted security clearanceIndividuals may also be subject to a background investigation including, but not limited to; criminal history, employment verification, education verification, drug testing, and creditworthiness.
Favor techconsulting is an equal opportunity employerQualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, marital status, disability, veteran status, sexual orientation, or genetic information.
Jusjofeijz
Job type: full-time
Work location: multiple locations
