JobsCyber SecuritySan DiegoCybersecurity Engineer III
INFORMATION SYSTEMS SOLUTIONS, INC
Posted yesterday
Cybersecurity Engineer III
INFORMATION SYSTEMS SOLUTIONS, INC · San Diego, California, United States
In short
The Cybersecurity Engineer III supports Assessment and Authorization (A&A) accreditation efforts and maintains cybersecurity monitoring operations. They are responsible for identifying vulnerabilities, performing incident triage, and developing comprehensive security documentation.
What they're looking for
MUST-HAVE SKILLS
ALSO MENTIONED
Candidates must have 10+ years of experience in cybersecurity or incident response and hold an IAM II certification. A Secret clearance is required, along with proficiency in the Risk Management Framework.
About the employer
Information Systems Solutions, Inc.
ISS is an innovative information technology (IT) services and solutions provider to the Department of Defense (DoD) and other federal government agencies. We provide expert systems integration and administration, network engineering, software development, information assurance, and project management support. ISS employees are skilled professionals dedicated to providing the highest quality support and services. We are committed to the success of our customer’s mission and experienced in "Meeting Critical Goals on Time Throughout the World."
Read moreShow less
Why Work For ISS? At Information Systems Solutions (ISS), we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career.
- INDUSTRY
- IT Services and IT Consulting
- COMPANY
- Privately Held
- FOUNDED
- 1997
- HEADQUARTERS
- Rockville, MD
- SIZE
- 201-500
- OFFICES
- 1 on LinkedIn
KNOWN FOR
Is your LinkedIn profile ready for roles like this?
A free review of your profile, scored against what Security roles ask for, and what to fix first.
Questions about this role
- Is this INFORMATION SYSTEMS SOLUTIONS, INC role remote?
- Tagged on site.
- What does it pay?
- The posting lists $170,000–$180,000 a year.
- Does it sponsor visas?
- Listed as no visa sponsorship.
- What experience does it ask for?
- Listed as 10+ years.
The posting, in full
Description Information Systems Solutions (ISS) is seeking a Cybersecurity Engineer III to support the NIWC PAC Information Technology Management Support Services contract. The Cybersecurity Engineer III will be responsible for supporting Assessment and Authorization (A&A) accreditation efforts. This role maintains cybersecurity monitoring operations, performs triage to assess the scope and impact of incidents, identifies vulnerabilities, and recommends remediation strategies. The role requires in-depth knowledge of the Risk Management Framework.
▶ READ THE FULL POSTING▼ CLOSE THE FULL POSTING
Description
Information Systems Solutions (ISS) is seeking a Cybersecurity Engineer III to support the NIWC PAC Information Technology Management Support Services contract. The Cybersecurity Engineer III will be responsible for supporting Assessment and Authorization (A&A) accreditation efforts. This role maintains cybersecurity monitoring operations, performs triage to assess the scope and impact of incidents, identifies vulnerabilities, and recommends remediation strategies. The role requires in-depth knowledge of the Risk Management Framework.
This position is 100% onsite
Specific duties include, but are not limited to the following:
- Test and apply security controls based on security categorization, the application of overlays (privacy, classified, intel, etc.) and security control tailoring (AI, NOFORN, etc.).
- Conduct active and passive reconnaissance of data, with the ability to assess and author Plans of Milestones and Actions (POA&Ms) containing accurate and verifiable mitigation statements, milestone tracking, and applying to the most relevant security control.
- Development of comprehensive required A&A documentation, including System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Reports (SARs), etc.
- Adherence to the eMASS scheduled tasking within the accreditation cycle, including Quarterly Independent Verification and Validation (IV&V), quarterly STIG checks, Annual Security Review (ASR), monthly POA&M updates, and resubmission for ATO, ATC, IATC and IATT as applicable.
- Maintenance of DISA circuit connections (CCSDs), inheritance from accredited systems and cloud service providers, and the workflow schedule on accreditations.
Why Work For ISS?
At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career.
Requirements
Clearance Level
Secret
Certification:
IAM II
One of the following:
CAP
CASP
CISM
CISSP (or Associate)
GSLC
Required Qualifications
- 10+ years of experience in cybersecurity or incident response
- Certifications preferred: Certified Information Systems Security Professional (CISSP)
Skills & Competencies
- Cybersecurity Monitoring and Incident Response· Security Testing, Auditing, and Remediation· Data Analytics and Risk Assessment
- Proficiency with IT Security Software and Web Security Tools