Information System Security Engineer (ISSE) II

About This Role

The Information System Security Engineer (ISSE) II will serve as a front-line system administrator for Naval Surface Warfare Division (NSWD) systems and applications. This role supports the CIO, ISSM, ISSO, and validators in maintaining and enhancing Navy Band systems and architecture to achieve DOD compliance requirements.

Responsibilities

• Perform Information Assurance tasks for RMF Assessment & Authorization (A&A) processes for USN systems
• Perform system configuration, testing, and develop documentation for the RMF process
• Assist with developing, maintaining, and tracking Risk Management Framework (RMF) system security plans, including System Categorization Forms and POA&M
• Participate in RMF meetings and collaboration sessions with Navy Surface Warfare activities and authorizing officials
• Ensure actions required by the Plan of Action and Milestone (POA&M) are implemented to maintain system risk and security posture
• Support periodic documentation of DOD/DON waivers or reporting requirements (e.g., HBSS, PKI, PPSM, GIG)
• Provide System Administrator support to the headquarters and Navy surface Warfare activities, including configuration maintenance and system hardening
• Provide and maintain hardened system images for Headquarters and Fleet Band public affairs office (PAO) and audio system laptops
• Provide technical support to HQ and Fleet Band staff as necessary
• Support CIO/ISSM during fielding of new technology, including providing Navy Cyber Security Impact, Security Evaluation, and Technology Recommendations

Requirements

• Active Secret Clearance
• Bachelor's degree in computer science, information technology, or an equivalent STEM degree
• 3+ years professional experience in information security and system hardening

Qualifications

• Bachelor's degree in computer science, information technology, or an equivalent STEM degree from an accredited college or university
• Three (3) years professional experience capturing and refining information security operational and security requirements, and ensuring those requirements are properly addressed through purposeful development, and configuration, and implementing security controls, configuration changes, software/hardware updates/patches, vulnerability scanning, and securing configurations.

Skills

* Required skills

Benefits

Certifications