Senior ISSE

Description

Senior Information Systems Security Engineer:

At B&A, we foster and embrace a distinct set of values that we live by and instill in all aspects of our organization: dedication, commitment, partnership, trust, and recognition. We have incorporated these values into successful delivery for our customers since 1988. B&A believes in ensuring its employees feel deeply connected to B&A, recognizing successes and hard work, and providing continuous opportunities to learn and grow. Our people are entrepreneurial thinkers that combine mindset, vision, and experience to drive value - not only to us as an organization, but to the clients we support. We promote a collaborative culture with our clients, and with each other, as one team working towards a common vision. We'd love for you to join our team!

Job Summary:

B&A is looking for an Senior Information Systems Security Engineer to join a contract with a federal government client in support of an important mission. The?Information Systems Security Engineer?supports establishment and implementation of security engineering for?over?thirty (30)?systems and services owned and operated by the CJIS Division.?This includes coordination with ISSOs, SSAs and CJIS system teams to ensure security engineering for development of a new capability or system and modifications of an existing capability or system in order to satisfy FBI security controls and security mandates.

Responsibilities:

• Assisting ISSOs, SSAs, and system owners in discovering and understanding the information protection needs supporting the mission or business.
• Supporting selection of applicable security controls and best business practices?to allocate information protection needs to systems and ensuring system security requirements are?defined.?
• Assisting design of?system security architecture and collaboration?with the business or development?system engineers and/or system architects?in the areas of functional analysis and allocation by analyzing proposed architectures, allocation of security services, and selecting security mechanisms resulting in an overall security architecture design.
• Identifying components or elements, allocating security functions to those elements, and describing the relationships between the elements.
• Assisting the business lines and value streams in the Information Technology Management Section (ITMS) to determine?security?authorization?boundaries?based on FBI policy and?National Institute for Standards and Technology (NIST)?Risk Management Framework (RMF) standards.
• Developing detailed security designs to analyze design constraints, analyzing trade-offs, doing detailed system and security design, and considering life-cycle support.
• Mapping all of the system security requirements to the element level until all are addressed.?The final detailed security design results in component and interface specifications that provide sufficient information for acquisition when the system is implemented.
• Assessing effectiveness of the information protection, whether the system can provide the confidentiality, integrity, availability, authentication, and nonrepudiation for the information it is processing that is required for mission success.

Education and Experience:

• Bachelor's Degree.
• 10 + years of experience.

Required Skills:

• Demonstrated ability to brief diverse audiences on technical matters and convey information clearly and concisely.
• Experience preparing written reports and oral presentations for designed projects for presentation to a variety of individuals within and outside the organization.
• Expert level of understanding of?Cloud Security Providers (CSP)?and secure engineering and design of cloud-based solutions via automation.
• Experience and?working knowledge of?security for?cloud technologies and services, specifically AWS and Microsoft Azure.
• Expert level experience and knowledge of government security standards and industry best practices including the NIST RMF and NIST security and privacy controls.
• Experience conducting industry research to create detailed reports, whitepapers, and technical comparisons.
• Working knowledge of?agile development methodology specifically including?Scaled-Agile Framework (SAFe), lean systems development, and Continuous Integration/Continuous Deployment (CI/CD) methodology.
• Significant hands-on experience implementing, operating, and maintaining infrastructure and applications.
• Experience within diverse teams of architects, developers and integrators.
• Experience leading or co-leading technology projects with enterprise dependencies; and
• Experience developing, maintaining, and revising policies and guidelines relating to information security.

Desired Skills:

• Master's Degree preferred.

Security Clearance:

• Must hold an active Top Secret Clearance.

More About B&A:

Notable Clients
B&A has grown to be a company that is trusted by our clients for exceptional service, innovative solutions, and inspired employees. Our service extends through federal, state, and local Government, the private sector, and higher education. Some of our notable clients include Department of Homeland Security, U.S. Customs and Border Protection, U.S. Senate, U.S. Courts, U.S. Census Bureau, U.S. Navy, and more.

Benefits and Programs

B&A is proud to offer three robust individual and family medical plans to full time employees, including a Health Savings Account (HSA) option as well as two tiers of dental coverage, vision, life & AD&D, disability, accident, hospital indemnity, and critical illness insurance. In addition to these benefits, B&A employees enjoy paid time off, B&A sponsored trainings and certifications, pet insurance benefits, commuter transit benefits and a free subscription to a virtual exercise platform (NEOU). B&A's 401(k) plan is available to all employees and includes a company matching contribution.

B&A has launched several programs to focus on employee engagement, wellness, and assistance. These include:

• The B&A Cares program: 30/60/90-day wellness check ins, personal development, financial management, and stress management seminars, and more
• A formal mentorship program
• Job shadowing and cross training opportunities
• Brand Ambassador program
• Employee Assistance Program (EAP) - Access to various support resources to include counseling, legal guidance, financial planning, and more
• Monthly teambuilding events
• B&A Annual Wellness Challenges: #StepWithB&A, #WalkDuringLunchWithB&A, #VolunteeringWithB&A, #ExerciseDuringLunchWithB&A, and more

At B&A, we place significant importance on improving the communities and lives of citizens across the nation through our involvement, technology expertise, and employees. B&A puts an emphasis on charitable efforts in the Northern Virginia area, including Capital Area Food Bank pantry drives, book donations, Hope for Henry Foundation events, and many more. In recognition of all these efforts, B&A has been named a Companies as Responsive Employers (CARE) award recipient by Northern Virginia Family Services and nominated by the Northern Virginia Chamber of Commerce for Outstanding Corporate Citizenship Award.

EEO

B&A provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. B&A complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy covers conduct occurring at B&A's offices, and other workplaces (including client sites) and all other locations where B&A is providing services, and to all work-related activities.

B&A participates in e-Verify. We provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 Form to confirm work authorization.