| Overview 
 
 VTG seeks to hire an Information Systems Security Engineer (ISSE) in Chantilly, VA to monitor and maintain systems security on operational systems such as malicious code eradication, configuration management, assessment and authorization of current and future systems, as well as to review and revise systems security documentation on proposed systems. ISSOs shall know how to implement common information system security practices, policies, and technologies. Additionally, ISSOs demonstrate self-motivation, initiative, sound judgement, and effective interpersonal skills, team building skills, and effective communication skills.  What will you do?
 
 
 
 Collaborate with system stakeholders and teammates to enhance system securityCommunicate effectively with all security stakeholders Create, revise, or review cybersecurity documentationProactively identify opportunities for increasing customer value and engagementAct as a Data Transfer Agent between systems of varying security domainsInventory, track, and control removable media and portable electronic devicesAdvise stakeholders on NIST SP 800-37 RMF workflows and requirementsReview SIEM and RMF workflow tools to advise ISSM on system security baselines and authorization statusesAdvise system stakeholders on acceptable use and applicable cybersecurity policy or regulationProperly report and document security incidents and response actions Do you have what it takes?
 
 
 Requirements 
 Clearance: Active TS/SCI with PolygraphBachelor's degree + 10 years of experience OR High School/GED + 14 years of experience OR Associate's degree + 12 years of experience OR Master's degree or higher +8 years of experience Desired Qualifications 
 Experience in ICD 503 certification and accreditationUnderstanding of NIST Risk Management FrameworkExperience with Continuous Monitoring of implemented security controls to maintain system security posture, to include: 
   System scanning to identify vulnerabilitiesRisk assessments, vulnerability management, incident response planningPOAM/risk mitigation documentation Application and OS auditing 
   Familiarity with AWS and cloud-based architectureSecurity documentation expertise, to include 
    
     Security control responses and artifactsSystem Security Plans (SSPs) and Concept of Operations (CONOPS)System Auditing PlansSystem Configuration Management PlansSystem Contingency Plans and Resiliency Testing ProceduresInteragency Security Agreements for connections to partner systemsExperience in Security Relevant Changes (SRCs), to include evaluation of type of SRC and security implications/approvalsDetail oriented, ability to multi-task across projects, prioritize tasks, and collaborate with ISSE, ISSM, and DevOps teams |