BBNC
BBNC

Senior Information System Security Engineer (ISSE)

Bethesda, MD, US • Posted 23 hours ago • Updated 10 hours ago
Full Time
On-site
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • Microsoft Windows Vista
  • Information System Security
  • Migration
  • Science
  • ISSE
  • Information Systems
  • Hardening
  • Auditing
  • Event Management
  • Authorization
  • Leadership
  • Information Assurance
  • Security Clearance
  • Security+
  • Customer Engagement
  • GSEC
  • Vulnerability Assessment
  • DoD
  • Documentation
  • Security Controls
  • Encryption
  • Management
  • Cyber Security
  • CISSP
  • CISM
  • Microsoft Office
  • Security Operations
  • STIG
  • SCAP
  • Regulatory Compliance
  • eMASS
  • Risk Management Framework
  • RMF
  • Splunk
  • SIEM
  • Microsoft
  • Microsoft Windows
  • OS X
  • Linux
  • Endpoint Protection
  • Insurance
  • Life Insurance

Summary

Vista Global Solutions (VGS) is seeking a Senior Information System Security Engineer (ISSE) to support the migration and enterprise implementation of Microsoft Defender across Windows, macOS, and Linux environments at the Uniformed Services University of the Health Sciences (USUHS).

The Senior ISSE will serve as a key cybersecurity engineering and compliance resource responsible for ensuring Microsoft Defender configurations, endpoint security controls, and transition activities align with Department of Defense (DoD) cybersecurity requirements and applicable Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs).

What You'll Do:
  • Perform STIG assessments, security hardening, and compliance validation for Microsoft Defender tenant configurations and Windows, macOS, and Linux endpoints.
  • Conduct Security Content Automation Protocol (SCAP) scans and manual configuration reviews to validate DISA STIG compliance.
  • Develop and maintain STIG Compliance Checklists and supporting security documentation required for enterprise deployment.
  • Identify security findings, recommend corrective actions, and coordinate remediation to achieve required compliance thresholds, including resolution of Category I findings.
  • Validate endpoint security safeguards before removal of legacy Trellix components, including BitLocker and FileVault encryption and associated key escrow.
  • Verify security audit and telemetry integration with Splunk Security Information and Event Management (SIEM) and Microsoft Sentinel.
  • Review security exceptions, deployment variances, and enclave-specific requirements and assess associated cybersecurity risks.
  • Support the Risk Management Framework (RMF) lifecycle, including development, maintenance, and submission of Assessment & Authorization (A&A) artifacts and Authorization to Operate (ATO) documentation within eMASS.
  • Perform vulnerability assessments and patch-compliance verification using Assured Compliance Assessment Solution (ACAS).
  • Develop, maintain, and track Plans of Action and Milestones (POA&Ms) through remediation and closure.
  • Coordinate with cybersecurity, endpoint engineering, infrastructure, and operational stakeholders to ensure security requirements are incorporated throughout the Microsoft Defender transition.
  • Provide cybersecurity engineering recommendations and technical guidance to program leadership and Government stakeholders.

What You Bring:

Required:
  • Minimum 5 years of cybersecurity engineering, information assurance, or security compliance experience, preferably supporting Federal or DoD environments.
  • Active DoD Secret security clearance required.
  • Current DoD IAT Level II-compliant certification, such as Security+ CE, CySA+, or GSEC, as applicable to current DoD requirements.
  • Demonstrated experience implementing or assessing DISA STIGs and DoD cybersecurity requirements.
  • Experience with vulnerability assessment, remediation tracking, and security configuration validation.
  • Working knowledge of the DoD Risk Management Framework (RMF) and A&A processes.
  • Experience developing or maintaining cybersecurity documentation, including STIG checklists, POA&Ms, security control evidence, and ATO artifacts.
  • Experience with enterprise endpoint security technologies and Windows endpoint security controls.
  • Knowledge of encryption technologies and key-management concepts, including BitLocker and FileVault.
  • Ability to analyze technical security findings and communicate risks and remediation recommendations to technical and non-technical stakeholders.

Preferred:
  • Advanced cybersecurity certification such as CISSP, CISM, or CASP+/SecurityX, as applicable.
  • Microsoft security certification relevant to Microsoft Defender, Microsoft 365, or security operations.
  • Experience with Microsoft Defender security technologies.
  • Experience with DISA STIGs, STIG Viewer, and SCAP compliance tools.
  • Experience with ACAS, eMASS, RMF, and A&A processes.
  • Experience with Splunk SIEM and/or Microsoft Sentinel.
  • Experience with BitLocker and FileVault.
  • Experience with Trellix/ePO environments.
  • Experience supporting Windows, macOS, and Linux endpoint security.
  • Experience developing and tracking POA&Ms through remediation and closure.

What We Offer:

VGS offers a competitive benefits package to include: paid holidays, paid time off including sick and vacation leave, medical, dental and vision insurance, flexible spending accounts, short and long term disability, company paid life insurance, 401(k) with a company match and discretionary profit sharing and tuition reimbursement.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10273070
  • Position Id: 4f56f23fc8438d9869bee5f4501d13c2
  • Posted 23 hours ago
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Information System Security Engineer (ISSE)

Alexandria, Virginia

•

Today

Full-time

USD 180,000.00 - 190,000.00 per year

Information System Security Officer (ISSO)

Arlington, Virginia

•

Today

Full-time

USD 116,500.00 per year

Junior Security Engineer

Bethesda, Maryland

•

Today

Full-time

USD 69,550.00 - 125,725.00 per year

IT Security Specialist

Alexandria, Virginia

•

Today

Full-time

USD 110,000.00 - 140,000.00 per year

Search all similar jobs
More jobs at BBNC in Bethesda, MD