Information Systems Security Engineer (ISSE), Level 0

About the Information Systems Security Engineer (ISSE) role

• The Information Systems Security Engineer (ISSE) performs, or reviews, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommends mitigation strategies
• Validates and verifies system security requirements definitions and analysis and establishes system security designs
• Designs, develops, implements and integrates IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements
• Builds IA into systems deployed to operational environments
• Assists architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Agency security policy and enterprise solutions
• Supports the building of security architectures
• Enforces the design and implementation of trusted relations among external systems and architectures
• Assesses and mitigates system security threats/risks throughout the program life cycle
• Contributes to the security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations
• Reviews Certification and Accreditation (C&A) documentation, providing feedback on completeness and compliance of its content
• Applies system security engineering expertise in one or more of the following: system security design process
• engineering life cycle
• information domain
• cross-domain solutions
• commercial off-the-shelf and government off-the-shelf cryptography
• identification
• authentication
• authorization
• system integration
• risk management
• intrusion detection
• contingency planning
• incident handling
• configuration control
• change management
• auditing
• certification and accreditation process
• principles of IA (e.g., confidentiality, integrity, non-repudiation, availability, and access control)
• and security testing
• Supports security authorization activities in compliance with NSA/CSS Information System Certification and Accreditation Process (NISCAP) and DoD Information Assurance Certification and Accreditation Process (DIACAP) process, the NIST Risk Management Framework (RMF) process, and prescribed NSA/CSS business processes for security engineering

What you'll do

The Level 0 Information Systems Security Engineer (ISSE) shall possess the following capabilities:

• Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments
• Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of IA architectures, systems, or system components

What you'll bring

Qualifications:

• No demonstrated experience is required
• Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university is required
• DoD 8570 compliance with Information Assurance Systems Architect and Engineer (IASAE) Level 1 is required
• Four (4) years of ISSE experience may be substituted for a bachelor's degree

Other levels in this role

• Level 1
• Level 2
• Level 3