REQUIREMENTS:
- Serve as the Program Office’s information security professional responsible for managing all aspects of an organization's information security system, including researching, testing, training, and implementing programs designed to safeguard sensitive information from possible compromise.
- The ISSE works with System Engineering teams to incorporate cyber resiliency objectives, techniques, and design principles into all system engineering and development efforts throughout the systems development life cycle (SDLC).
- Develop and maintain documentation and diagrams for security tools, system environments, and cloud operations
- Perform requirements analysis, design, and integration for complex software applications and collaboration infrastructures
- Participate in the change management process, including reviewing Change Requests and assisting in the assessment of security impact of proposed changes
- Write implementation and design documents describing how security features are implemented
- Create and maintain information system security documentation, Standard Operating Procedures (SOP), and provide guidance on active Plans of Action and Milestones (POA&M)
- Conduct periodic and continuous monitoring of the system, procedures, and documentation to ensure compliance with the authorization package
EXPERIENCE:
- 7+ years' technical experience in cybersecurity, information technology, or systems engineering
- Must have experience working with Special Access Programs (SAPs)
- Strong proficiency fault tolerance, and Reliability, Maintainability, Availability (RMA) subject matter.
- Must possess excellent analytical skills and be capable of quantifying risk to enterprise systems and level of compliance with security policy
- Excellent communication skills (verbal and written) required
Advanced knowledge in one or more of the following areas:
- Java, Python, Ruby and/or C++
- Linux Expertise (RedHat/RHEL or CentOS preferred)
- Dynamic & Static Application Security Scanning (e.g., Arachni, OWASP ZAP, BurpSuite, Fortify, Checkmarx, etc.)
- Virtualization and containers (EC2, Docker)
- Infrastructure Security Scanning, Vulnerability Scanning (Twistlock, ACAS/Nessus)
Certification Requirements in one or more of the following:
- Certified Information Systems Security Professional (CISSP).
- Certified Cloud Security Professional (CCSP).
- Information Systems Security Engineering Professional (ISSEP)
- DOD Information Technology Security Certification and Accreditation Process (DITSCAP)
- DOD Information Assurance Certification and Accreditation Process (DIACAP)
EDUCATION:
- Bachelor’s degree in engineering, computer science, cybersecurity, networking, or programming (Master’s degree DESIRED)
CLEARANCE REQUIREMEMTS:
- Current/active Top Secret/SCI; Current or recent DoD SAP access
- Subject to a Counterintelligence (CI) polygraph
TRAVEL:
- Up to 25% per month
Blue Sky Innovators, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. If you are a qualified job seeker with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access http://www.blueskyinnovators.com as a result of your disability. To request an accommodation, please email us at [email protected] and provide your name and contact information. Please note: this is only for job seekers with disabilities requesting an accommodation.
Top Skills
What We Do
Blue Sky Innovators supports government and commercial customers in the definition and delivery of advanced technologies. As established leaders in the DoD and IC, we bring top talent to solve the toughest challenges.
