Information Security Systems Engineer (ISSE)

Job Title:
Information Security Systems Engineer (ISSE)

Job Description:
Omitron is seeking a full-time Information Security Systems Engineer with experience in the NIST 800-37 Risk Management Framework IT systems and networks administration for large-scale mission critical programs supporting the Space Domain Awareness/Command and Control (SDA/C2) mission.

The ISSE will apply current systems security engineering methods, practices and technologies to the architecture, design, development, evaluation and integration of systems and networks to maintain system security. Throughout the lifecycle of system, works closely with customers to ensure that the security protection needs, concerns and requirements are defined and implemented with appropriate fidelity and rigor, early, and in a sustainable manner that will allow for the security authorization of the system of interest. Works with systems developers or commercial product vendors in the design and evaluation of state-of-the-art secure systems, networks, and database products using methods such as encryption technology, vulnerability analysis and security management.
Responsible for integration of multiple methods into a cohesive system security perimeter and environment while implementing the policies and procedures necessary to monitor and maintain such an environment. Prepares Certification and Accreditation documentation, using multiple industry standards such as NIST 800-53, to achieve security authorization of supported systems. Represents program security needs, concerns and requirements at customer meetings. The ISSE works closely with the Information Systems Security Officer (ISSO) and the C2 Cybersecurity Engineering Team.
US citizenship required / E-Verify Participation

Responsibilities include:

• Execute security requirements, documentation, and risk mitigation strategies.
• Comply with CNSSI 1253, DoDI 8510.01 Risk Management Framework Accreditation Process.
• Conduct ACAS (Assured Compliance Assessment Solution) vulnerability scans using Nessus Security Center, manage scan profiles, update plugins, and troubleshoot issues as needed.
• Perform annual control assessments using established test procedures to validate security controls are functioning as intended.
• Develop, track, and manage Plans of Action & Milestones (POA&Ms) for identified security weaknesses and deficiencies.
• Prepare and submit quarterly security status reports to stakeholders, documenting POA&M progress and ongoing security activities.
• Perform continuous monitoring activities, document completion of required tasks, and report any findings.
• Conduct weekly audit log reviews to identify security events including failed authentication attempts, privilege escalation, unusual activity patterns, and atypical usage.
• Conduct monthly reviews of user accounts to identify and disable inactive accounts in accordance with security policies.
• Perform annual validation of user access privileges and role assignments in coordination with supervisors to ensure appropriate access levels and enforcement of separation of duties.
• Serve as primary incident handler for all security incidents, following established operating procedures and escalation protocols.
• Assist with patch management including application of patches and verification of successful deployment to ensure timely remediation of vulnerabilities.
• Maintain comprehensive understanding of system architecture, components, data flows, interconnections, and security categorization.
• Coordinate Interconnection Security Agreements (ISAs) for external connections and ensure proper documentation in Security Plans and Risk Assessments.
• Follow Configuration Management Plan (CMP) procedures for all system changes and document security impacts of modifications.

Qualifications:

• Bachelor's Degree and a minimum of 4 years of prior relevant experience or Graduate Degree and a minimum of 2 years of prior related experience. 8+ years of prior related experience may be substituted in lieu of a degree
• DOD 8140 certification (or NIST 800-181), appropriate for the position (e.g., Sec+, SecX, CISSP)

Preferred Experience:

• Familiarity with IBM AIX, Cisco and Juniper networking equipment operating systems, Palo Alto firewalls, and VMware vCenter.
• Experience in configuration and use of cyber defense and vulnerability assessment tools such as ACAS, SCC and ESS.
• System testing and evaluation methods and RMF assessment methodology & process.
• Experience applying DISA System Technical Implementation Guides (STIGs) to Operating Systems, Applications, Network devices
• Proficiency with Linux and Windows based operating systems

• Previous experience in Systems or Network Administration, including NIPR/SIPR experience
• Familiarity with scripting and automation (languages vary - Python, MATLAB, BASH, etc)
• Proficiency with Microsoft Office Product Suites: Excel, Word, PowerPoint, Visio
• Ability to work independently as well as in a team environment
• Knowledge of Space Domain Awareness/Command and Control (SDA/C2) mission

Security Clearance Requirements:
• Candidate must possess an active TS/SCI clearance
• US citizenship required

Job Location:
• Vandenberg SFB, CA
• Occasional travel may be necessary

Compensation and Benefits:

• The salary range for this role is $120,000 to $175,000, depending on education level, relevant experience, and other factors.

Benefits include:
• Health, Dental and Vision Insurance
• HSA or FSA accounts
• Company paid ST/LT Disability and AD&D insurance
• Paid Federal Holidays
• Paid Vacation Leave and Sick Leave
• 401k with company match
• Supplemental Insurance options like AFLAC
• Education Assistance
• Voluntary Life Insurance

Company Overview
Omitron is an Aerospace Engineering and Information Technology small business firm headquartered in Beltsville, Maryland, with a field office located in Colorado Springs, Colorado. Since 1984, Omitron has provided excellence in engineering services and product development to government and industry customers for both civilian and military aerospace programs.
Omitron recognizes that outstanding people are the key to our success. Our goal is to select highly qualified and motivated individuals and provide them with an environment necessary to stimulate and nurture engineering and business objectives. Omitron offers its employees competitive salaries, a full benefits package, and excellent career growth opportunities. We welcome talented professionals who wish to take advantage of the opportunities we offer.
At Omitron, we believe that a workplace that fosters innovation and collaboration will be a successful one. We are committed to attracting, developing, and retaining top talent from a broad range of backgrounds, perspectives, and experiences.
Per Title VII, our hiring decisions are made based on qualifications, skills, and experience, in accordance with our commitment to equal opportunity employment and nondiscrimination policies. We welcome all individuals who share our passion for excellence and encourage applicants from diverse backgrounds to apply. We also support a workplace where every employee feels valued, respected, and empowered to contribute their best work. Our workplace initiatives are open to all and designed to create a culture of belonging for everyone.