Information System Security Engineer

Responsibilities

The Information System Security Engineer will manage secure design, analysis, and testing of information security systems within an AWS cloud environment. They are responsible for maintaining technical documentation, performing security audits, and mitigating system vulnerabilities.

Requirements

Candidates must hold an active Secret clearance and possess at least 4 years of experience in security architecture and network security. A Security+ certification or equivalent is required, along with proficiency in AWS console administration and system administration.

Skills

• Information Security
• AWS
• Vulnerability Management
• Incident Response
• Network Security
• System Administration
• Security Architecture
• Security Testing
• Risk Assessment
• Technical Documentation
• Agile Software Development
• Security Compliance
• Troubleshooting

About this role

Everforth ECS is seeking an Information System Security Engineer to work in
our Stafford, VA office.  

The Everforth ECS Team provides focused Agile software development and
maintenance for CODIS, a mission-critical application for the FBI. CODIS
supports a database repository of DNA profiles from individuals, unsolved crime
scene evidence, and missing persons. CODIS software allows local, state, and
national laboratories to compare DNA profiles electronically, thereby linking
serial crimes to each other and identifying suspects by matching DNA profiles
from crime scenes to individuals’ profiles.

Responsibilities

* Work in the Security & Infrastructure team for cloud-based development in AWS
* Responsible for the secure design, analysis, and test of information security
systems and products.
* Ensure technical documentation exists for all systems and is kept up to date
to include system security plans, business impact analyses, continuity of
operations plans, mitigations, authorized software lists, authorized hardware
lists, and elevated user access lists and roles.
* Create and update security test plans for detecting and mitigating risks to
information systems.
* Engineer and perform tests and test plans to satisfy audits. Evaluate,
validate and implement solutions for mitigating information systems findings
or risks.
* Apply methods, standards and approaches for ensuring the baseline security
safeguards are appropriately implemented and documented.
* Advise on a range of security related activities such as establishing system
boundaries, assessing the severity of system weaknesses and deficiencies,
security alerts and potential adverse effects of vulnerabilities.
* AWS network and security support
* Occasional need for off-hours support for system upgrades, patches and
maintenance activities

Qualifications
* Active Secret clearance
* At least 4 years of experience working with security architecture,
vulnerability management, incident response, and network security tools.
* Current Security+ certification (or greater) or the ability to obtain within
6 months
* System Administration experience
* Strong attention to detail and solid troubleshooting ability
* AWS console administration experience
* Experience with security settings implementation

About ECS Tech Inc

IT Services and IT Consulting · 11-50 employees · headquartered in La Mirada, California