Information Systems Security Engineer

ASRC Federal•Ashburn, VA

2d•Onsite

About The Position

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™ ASRC Federal is seeking an Information System Security Engineer (ISSE) to support a government contract located in Virginia. Work location: Onsite (Ashburn, VA) Clearance: Public Trust (successful completion of government background investigation) Summary: The Information System Security Engineer (ISSE) will be responsible for ensuring the security and integrity of the IT infrastructure and systems within the U.S. Customs and Border Protection (CBP). This role includes implementing and managing security measures to protect sensitive data and systems from cyber threats. The Cybersecurity Engineer will conduct vulnerability assessments, complete security testing, and ensure compliance with relevant policies and regulations. The ideal candidate will collaborate with various departments to enhance security posture and will be involved in security architecture development and incident response planning. Responsibilities: As a key member of the Information Technology team, the Cybersecurity Engineer will play an essential role in safeguarding the agency's information systems.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Minimum of 6 years of experience in cybersecurity roles, with a focus on risk management and systems security.
Experience in integrating a system into a tool like SIEM or EDR
Experience with network ATOs and network architecture and engineering.
Experience resolving POA&Ms, and designing/developing patches to vulnerabilities
Proven experience with security frameworks such as NIST, FISMA, and the Risk Management Framework (RMF).
Strong analytical and problem-solving skills, with the ability to make informed decisions during cybersecurity incidents.
This position will also require passing a background investigation as per CBP policies.
Certified Information Systems Security Professional (CISSP) or equivalent.

Nice To Haves

Experience with Internet-of-Things (IOT) devices is a plus.
Certified Information Security Manager (CISM) or Certified Information Systems Auditor (CISA) preferred.
CompTIA Security+ or other relevant security certifications are advantageous.
Continuous Monitoring and incident response certifications are highly desirable.

Responsibilities

Coordinate security initiatives, conduct risk assessments, and develop security guidelines and procedures in alignment with CBP and DHS standards.
Responsible for training staff members on security best practices and will serve as the primary point of contact for security audits and assessments.
Play a crucial role in supporting the Unattended Ground sensors (UGS) program by ensuring the cybersecurity posture is robust and compliant with the required regulations. This will involve collaborating with project management teams to implement security monitoring, vulnerability management, and incident response capabilities aligned with DHS standards.
Oversee network monitoring and security scanning, maintaining security patching protocols, and provide configuration management support for the HGS system infrastructure connected to the CBP firewall.
Research, evaluate, engineer, develop, troubleshoot and support solutions and infrastructure for network deployments.
Defines and executes repeatable test procedures, creation of technical documentation and delivery of standards for implementation.
Assess potential risks with new products and provide security requirements and recommendations for risk mitigation to help the business succeed with their projects.
Consult as security subject matter expert with network architects, engineers, and others on solutions to security problems.
Ensure reports and findings are delivered in a timely and appropriate manner to management, operations and executive leadership.