Information Systems Security Engineer (ISSE)

Summary

This is a temporary role from hire until October 2027. While we will make every effort to find you a permanent role, this job backfills an existing employee on military leave.

As a NIPR Information Systems Security Engineer, you will have in-depth knowledge and be responsible for analyzing, designing, implementing, and documenting robust security measures to protect the organization's information systems and data assets. Your primary focus will be on identifying vulnerabilities, analyzing security threats, and implementing effective security solutions to ensure the confidentiality, integrity, and availability of sensitive information. Working closely with the cybersecurity team and IT staff, you will play a key role in maintaining a secure and compliant information technology environment.

Responsibilities

• *Security implementation:* design, deploy, and configure security configurations such as MFA, centralized logging, encryption mechanisms, and access control systems
• *Vulnerability assessment and audits:* conduct regular vulnerability assessments and audits to identify weaknesses in the IT infrastructure and applications; analyze results and collaborate with IT teams to remediate identified security gaps
• *Incident response and threat mitigation:* develop and implement incident response procedures; monitor and analyze security logs and alerts to detect and mitigate potential threats promptly
• *Security policy and standards development:* assist in the creation, review, and enforcement of information security policies, standards, and guidelines
• *Security compliance monitoring:* monitor and track compliance with security policies and procedures, conducting periodic audits and assessments
• *Secure network architecture:* design and implement secure network architectures, segmenting critical data and systems from less sensitive resources to minimize attack surfaces
• *Security incident investigation:* lead investigations into security breaches, identifying the root cause and recommending preventive measures
• *Data protection and privacy:* implement data protection measures, encryption techniques, and privacy controls to safeguard sensitive data

Required Qualifications

• Secret clearance
• 10+ years of relevant experience (a bachelor's degree in an applicable field may substitute for 5 years)
• DoD 8140 IAT Level II compliant certification such as CompTIA Security+
• Proven experience as a security engineer or in a similar role, with expertise in information security practices and technologies
• Strong knowledge of network security, operating systems, databases, and application security principles
• Familiarity with industry security standards and frameworks such as NIST or DoD controls
• Experience with vulnerability scanning and penetration testing tools
• Ability to analyze security incidents, perform root cause analysis, and propose effective solutions
• Knowledge of encryption technologies, access controls, and identity and access management principles
• Experience working in secure areas and on configuring classified systems

Preferred

• CISSP, CISM or similar cybersecurity certifications
• Familiarity with cloud security concepts and solutions
• BeyondTrust, NICE InContact, ACAS, ServiceNow, and SteelCloud familiarity