OneZero Solutions
Posted 2mo ago

DHS Information Systems Security Engineer

OneZero Solutions
Washington or District of Columbia
OnsiteFull Time
Responsibilities
  • leading design
  • conducting assessments
  • configuring appliances
Requirements
  • TS/SCI clearance and 12+ years ISSE experience supporting DoD/Federal environments. Expertise in RMF/FISMA
  • DoD STIG
  • NIST CSF
  • IDS/IPS, SIEM
  • Penetration testing
  • CRISC/GISP/CASP/CISSP or equivalent experience
Technical tools mentioned
OpenRMFDoD STIGNIST Cybersecurity FrameworkFISMARMFIDS/IPSSIEMVPN

Job description

We are an employee-centric company that truly appreciates our team members and their value to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and fostering teams that are and continue to be technically proficient and technically capable across a comprehensive range of cyber mission areas. OneZero full-time employees receive an extremely competitive benefits package that includes health/dental/vision/life insurance plans, 401K with company matching, PTO & paid holidays, employee referral program, and educational assistance. Additional details can be found on our website at: https://www.onezerollc.com/careers/

Position Title: DHS Information Systems Security Engineer Senior

Location: NCR

Clearance: TS/SCI

OneZero Solutions is on contract to provide division-wide support for Federal Information Security Modernization Act (FISMA) compliance, execution of the Risk Management Framework (RMF) process to achieve and maintain Authority to Operate (ATO) security authorizations, and deliver cyber security compliance for DHS operational mission systems. We are looking for personnel to support our DHS customer in achieving its mission of providing division-wide cyber security support for operational mission systems and assisting programs as they navigate the ATO process. The result of these efforts will be that the systems meet all the requirements for ATO approval before they are officially submitted to the Office of Chief Information Officer (OCIO).

Qualified Parking Allowance: Employer may provide a monthly stipend or cover the cost of parking for employees who commute to government site by car.

Job Summary

  • Lead the design, implementation, and testing of security controls for DHS systems and networks, applying advanced security principles and best practices.
  • Conduct comprehensive security assessments and penetration testing, identifying vulnerabilities and recommending mitigation strategies.
  • Configure and manage security appliances, firewalls, intrusion detection/prevention systems (IDS/IPS), and other security technologies.
  • Develop and maintain secure network architectures and system configurations.
  • Work with system owners and developers to integrate security controls into system development and implementation processes.
  • Stay current with evolving security threats, vulnerabilities, and industry best practices.
  • Contribute to the development and refinement of security engineering methodologies and procedures.
  • Collaborate with ISSO and other DHS teams on incident response and remediation efforts.
  • Mentor and guide junior ISSO staff, fostering professional development.


Qualifications

  • 12+ years of direct experience serving as an Information Systems Security Engineer (ISSE) within the DoD/Federal Government. Experience within the Intelligence Community and Law Enforcement is a strong plus.
  • Proven track record of success in designing, implementing, and maintaining secure IT systems, demonstrating innovation, initiative, and problem-solving skills.
  • In-depth understanding of information security principles and best practices, including network security, cryptography, system security, vulnerability management, and incident response.
  • Expertise in security assessment methodologies and penetration testing tools.
  • Proficiency in security technologies and protocols, such as firewalls, IDS/IPS, VPNs, encryption, and security information and event management (SIEM) systems.
  • Experience with relevant security frameworks and standards, such as DoD STIG, NIST Cybersecurity Framework, FISMA, RMF, and DHS supplemental IA controls and security policies.
  • Experience with OpenRMF is a strong plus.
  • Excellent analytical and problem-solving skills.
  • Strong written and verbal communication skills.
  • Ability to work independently and as part of a team in a fast-paced environment.

Education

Bachelor's degree and/or CRISC, GISP, CASP, CISSP, or other advanced security-related certifications

Additional relevant experience may be considered in lieu of a degree.

OneZero Solutions, LLC is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access www.onezerollc.com/careers as a result of your disability.

To request an accommodation, please contact us at [email protected] or call (202) 987-2580.


About OneZero Solutions

Provides cybersecurity and IT services to federal government agencies.

Similar jobs

Information Systems Security Engineer roles near Washington, District of Columbia
2d
Save
Mark Applied
Hide
Information Systems Security Engineer
Arlington, Virginia, United States
$99k-$225k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
12+ YOE12+ years systems engineering and cybersecurity; 7+ years security automation, cloud engineering, and architecture; 5+ years leading enterprise security solutions and automating RMF, NIST, and DoD STIG controls; bachelor's degree and Secret clearance.
RMF, GRC, Infrastructure-as-Code, Policy-as-Code, AWS, AWS Audit Manager, AWS Security Hub, AWS Config, AWS CloudTrail, AWS CloudWatch, RESTful APIs, OPA, Rego, AWS Config Rules, NIST SP 800-53, DoD STIG, AWS CloudFormation, Terraform, AWS Systems Manager, AWS Step Functions, Amazon EventBridge, Compliance-as-Code, CI/CD, GitOps, GitHub Actions, GitLab CI, Power BI
3d
Save
Mark Applied
Hide
Information Systems Security Engineer
Arlington, Virginia, United States
$99k-$225k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
12+ YOERequires 12+ years in systems engineering and cybersecurity, 7+ in security automation and cloud engineering, Secret clearance, a relevant bachelor's degree, and an AWS professional certification or CISSP.
RMF, NIST, DoD STIG, AWS, OPA, Rego, AWS Config Rules, AWS CloudFormation, Terraform, AWS Systems Manager, AWS Step Functions, Amazon EventBridge, GitHub Actions, GitLab CI, Power BI, RESTful APIs, AWS Audit Manager, AWS Security Hub, AWS CloudTrail, AWS CloudWatch, Infrastructure-as-Code, Policy-as-Code, Compliance-as-Code, GitOps, CI/CD
3d
Save
Mark Applied
Hide
ISSE
Herndon, Virginia, United States
$135k-$216k/yr OnsiteFull Time
Peraton
Peraton: Provides advanced technology and mission support for government agencies.
6+ YOEBachelor's with 8+ years or master's with 6+ years relevant experience, or equivalent experience; TS/SCI with polygraph, DoD IAT Level I, RMF, Xacta, DISA STIG, control testing, and information assurance experience.
Risk Management Framework (RMF), Xacta, AWS, Google Cloud, Red Hat, CentOS, Splunk, ACAS, Prisma, SonarQube, JFrog X-Ray, GitLab Code Quality, STIG Viewer, SIEM, NIST 800-37, NIST 800-53, ICD 503, CNSSI-1253
3d
Save
Mark Applied
Hide
Information Systems Security Engineer
Herndon, Virginia, United States
OnsiteFull Time
Excelity
Excelity: Provides IT solutions and software engineering for government agencies.
9+ YOERequires TS/SCI with CI Poly, 9+ years of A&A and information assurance experience, RMF and Xacta expertise, control validation, security risk knowledge, and DoD 8140 baseline certification; degree or additional experience required.
XACTA, Risk Management Framework (RMF), ICD 503, CNSSI-1253, NIST 800-37, NIST 800-53, Xacta, Splunk, ACAS, Prisma, SonarQube, JFrog X-Ray, GitLab Code Quality, DISA STIGs, STIG Viewer, AWS, Google Cloud, Red Hat, CentOS, Linux, DevSecOps, Containerized Systems
3d
Save
Mark Applied
Hide
Associate Information Systems Security Engineer
Columbia, Maryland, United States
$80k-$112k/yr OnsiteFull Time
TCOM
TCOM: Designs and manufactures persistent surveillance aerostat and ISR systems.
0+ YOEBachelor's degree in computer science, information assurance, computer engineering, or related discipline. No prior experience required; DoD 8570/8140 compliant certifications preferred.
firewalls, intrusion detection systems, enterprise anti-virus systems, software deployment tools
3d
Save
Mark Applied
Hide
Senior Information Systems Security Engineer (ISSE)
Chantilly, Virginia, United States
$190k-$225k/yr OnsiteFull Time
Amentum
AmentumNYSE: AMTM: Global provider of engineering, technical, and mission support services.
8+ YOEBachelor's degree in security, intelligence, mathematics, or a related field; 8 years of experience; Security+ CE, AWS Advanced Architect, and Splunk certifications; TS/SCI with poly clearance.
AWS Advanced Architect, Splunk Fundamentals 1, Splunk Fundamentals 2, NIST SP 800190
4d
Save
Mark Applied
Hide
ISSE
Herndon, Virginia, United States
$135k-$216k/yr OnsiteFull Time
Peraton
Peraton: National security and mission-critical government technology services provider.
6+ YOERequires 6+ years supporting RMF-based assessment and authorization, active TS/SCI clearance with polygraph, DoD IAT Level I, Xacta and STIG experience, and 100% onsite work.
XACTA, Splunk, ACAS, Prisma, SonarQube, JFrog X-Ray, GitLab Code Quality, STIG Viewer, AWS, Google Cloud, Red Hat, CentOS, Linux, DevSecOps, SIEM, NIST 800-37, NIST 800-53, RMF, Xacta
4d
Save
Mark Applied
Hide
Senior Information Systems Security Engineer (ISSE)
Chantilly, Virginia, United States
$190k-$225k/yr OnsiteFull Time
Amentum
AmentumNYSE: AMTM: Provides engineering, technology, and mission support to government agencies.
8+ YOEBachelor's degree in security, intelligence, mathematics, or related field; 8+ years in security engineering, risk assessment, and vulnerability management; Security+, AWS Advanced Architect, Splunk certifications; TS/SCI with poly.
AWS, Splunk, NIST SP 800-190