Information Systems Security Engineer

Responsibilities

The Information Systems Security Engineer is responsible for managing the cybersecurity posture, risk assessments, and continuity of operations for the organization's systems. They provide technical leadership, oversee security budgets, and ensure compliance with federal regulations and security policies.

Requirements

Candidates must hold a bachelor's degree in a relevant field and possess a TS/SCI security clearance. Additionally, a DoD 8140 certification such as CISSP, CISM, or CASP+ is required.

Skills

• Cybersecurity
• Risk management
• Information systems security
• Continuity of operations
• Security architecture
• Vulnerability management
• Incident response
• Compliance monitoring
• Supply chain risk management
• Security assessment
• Authorization
• Policy development
• Network security
• Intrusion detection
• Budget management
• Leadership

Benefits

• Medical plan
• Dental plan
• Vision plan
• Flexible spending accounts
• Health savings account
• 401(k) with matching contributions
• Roth
• Qualified transportation expense
• Short term disability
• Long term disability
• Life insurance
• Accidental death & dismemberment insurance
• Wellness program
• Paid time off
• Holidays
• Professional development reimbursement

About this role

Overview
Amyx is seeking to hire a Information Systems Security Manager-Intermediate to support our Cybersecurity Division/NGA Defender in the NCW St. Louis, MO area. Responsible for the cybersecurity of a program, organization, system, or enclave.
Responsibilities
Acquire and manage the necessary resources, including leadership support, financial resources, and key security personnel, to support information technology (IT) security goals and objectives and reduce overall organizational risk.
Acquire necessary resources, including financial resources, to conduct an effective enterprise continuity of operations program.
Advise senior management (e.g., Chief Information Officer [CIO]) on risk levels and security posture.
Advise senior management (e.g., CIO) on cost/benefit analysis of information security programs, policies, processes, systems, and elements.
Advise appropriate senior leadership or Authorizing Official of changes affecting the organization's cybersecurity posture.
Collect and maintain data needed to meet system cybersecurity reporting.
Communicate the value of information technology (IT) security throughout all levels of the organization stakeholders.
Collaborate with stakeholders to establish the enterprise continuity of operations program, strategy, and mission assurance.
Ensure that security improvement actions are evaluated, validated, and implemented as required.
Ensure that cybersecurity inspections, tests, and reviews are coordinated for the network environment.
Ensure that cybersecurity requirements are integrated into the continuity planning for that system and/or organization(s).
Ensure that protection and detection capabilities are acquired or developed using the IS security engineering approach and are consistent with organization-level cybersecurity architecture.
Establish overall enterprise information security architecture (EISA) with the organization's overall security strategy.
Evaluate and approve development efforts to ensure that baseline security safeguards are appropriately installed.
Evaluate cost/benefit, economic, and risk analysis in decision-making process.
Identify alternative information security strategies to address organizational security objective.
Identify information technology (IT) security program implications of new technologies or technology upgrades.
Interface with external organizations (e.g., public affairs, law enforcement, Command or Component Inspector General) to ensure appropriate and accurate dissemination of incident and other Computer Network Defense information.
Interpret and/or approve security requirements relative to the capabilities of new information technologies.
Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program.
Lead and align information technology (IT) security priorities with the security strategy.
Lead and oversee information security budget, staffing, and contracting.
Manage the monitoring of information security data sources to maintain organizational situational awareness.
Manage the publishing of Computer Network Defense guidance (e.g., TCNOs, Concept of Operations, Net Analyst Reports,
Monitor and evaluate the effectiveness of the enterprise's cybersecurity safeguards to ensure that they provide the intended level of protection.
Oversee the information security training and awareness program.
Participate in an information security risk assessment during the Security Assessment and Authorization process.
Participate in the development or modification of the computer environment cybersecurity program plans and requirements.
Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network system(s) operations.
Provide enterprise cybersecurity and supply chain risk management guidance for development of the Continuity of Operations Plans.
Provide leadership and direction to information technology (IT) personnel by ensuring that cybersecurity awareness, basics, literacy, and training are provided to operations personnel commensurate with their responsibilities.
Provide system-related input on cybersecurity requirements to be included in statements of work and other appropriate procurement documents.
Provide technical documents, incident reports, findings from computer examinations, summaries, and other situational awareness information to higher headquarters.
Recognize a possible security violation and take appropriate action to report the incident, as required.
Recommend resource allocations required to securely operate and maintain an organization's cybersecurity requirements.
Recommend policy and coordinate review and approval.
Supervise or manage protective or corrective measures when a cybersecurity incident or vulnerability is discovered.
Track audit findings and recommendations to ensure that appropriate mitigation actions are taken. Use federal and organization-specific published documents to manage operations of their computing environment system(s).
Promote awareness of security issues among management and ensure sound security principles are reflected in the organization's vision and goals.
Oversee policy standards and implementation strategies to ensure procedures and guidelines comply with cybersecurity policies.
Participate in Risk Governance process to provide security risks, mitigations, and input on other technical risk.
Evaluate the effectiveness of procurement function in addressing information security requirements and supply chain risks through procurement activities and recommend improvements.
Identify security requirements specific to an information technology (IT) system in all phases of the system life cycle.
Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
Assure successful implementation an...

About Amyx, Inc.

IT Services and IT Consulting · 501-1,000 employees · headquartered in Reston, Virginia · founded 1999