Senior Information Systems Security Engineer (ISSE)

免费注册后解锁"你的匹配分 vs 高分画像"与个人技能缺口。

Vista Government Solutions (VGS) is seeking a Senior Information Systems Security Engineer (ISSE) to support the Uniformed Services University Health Sciences (USUHS) Network Operations Center Cyber Support Services Task Order. The Senior Information Systems Security Engineer (ISSE) provides technical cybersecurity and Risk Management Framework (RMF) support for the rewrite and modernization of the Agency's Office 365 (O365) Authorization to Operate (ATO) package. The ISSE evaluates existing authorization documentation, technical configurations, system architecture, security-control implementation, and supporting evidence to develop accurate, complete, and eMASS-ready RMF artifacts. NOC Cyber_PD SR ISSE The ISSE works in coordination with the Government ISSM and technical stakeholders to ensure that security documentation accurately reflects the implemented O365 environment and applicable DoD and NIST cybersecurity requirements. The Government ISSM retains responsibility for cybersecurity governance, formal risk management oversight, and coordination with the authorization chain. NOC Cyber_PD SR ISSE What You’ll Do: Provide oversight and technical guidance to MS InTune and SCCM Endpoint Engineers. Support the comprehensive rewrite and modernization of the Agency's O365 ATO package and associated eMASS documentation. Review existing RMF and Information Assurance documentation to identify outdated, incomplete, duplicative, or technically inaccurate information. Develop and update System Security Plan (SSP) content, security-control implementation statements, POA M documentation, inheritance mappings, system diagrams, and other required authorization artifacts. Analyze applicable NIST SP 800-53 controls, DoD security requirements, DISA guidance, and inherited enterprise controls to determine documentation and evidence requirements. Review Microsoft 365/O365 configurations and supporting technical artifacts to determine how security controls are implemented within the operational environment. Coordinate with Microsoft 365 engineers, system administrators, endpoint engineers, cybersecurity personnel, and other technical SMEs to collect and validate information required for the ATO package. Review technical evidence and supporting artifacts for completeness, consistency, traceability, and alignment with documented security-control implementation. Document applicable Identity, Credential, and Access Management (ICAM), endpoint security, encryption, continuous monitoring, and Zero Trust capabilities as they relate to the O365 authorization boundary. Identify documentation and evidence gaps and coordinate with appropriate technical stakeholders to support resolution. Support development and maintenance of POA Ms and associated remediation documentation for identified deficiencies. NOC Cyber_PD SR ISSE Utilize eMASS to develop, update, organize, and maintain authorization artifacts and supporting evidence. Support the Government ISSM in preparing the O365 authorization package for review by applicable cybersecurity and authorization stakeholders. Address technical documentation deficiencies, questions, and comments identified during Government review of the authorization package. Support development of a technically accurate, complete, traceable, and submission-ready O365 ATO package. Maintain configuration, documentation, and evidence traceability throughout the ATO rewrite effort. Support knowledge transfer and development of repeatable processes for maintaining authorization documentation following completion of the rewrite. NOC Cyber_PD SR ISSE What You Bring: Required: Active Secret clearance. Security+ or higher certification. Bachelor's degree in Cybersecurity, Information Technology, Systems Engineering, Computer Science, or a related technical discipline, or equivalent combination of education and relevant experience. Approximately 7–10 years of progressive experience in cybersecurity, information assurance, systems security en

⚑ 岗位信息收录自公开招聘页（公开招聘平台），以雇主官网为准