Information Systems Security Engineer (ISSE) - CLEARANCE and POLYGRAPH REQUIRED

As an Information Systems Security Engineer (ISSE) at Constellation Technologies, you’ll oversee vital security tasks, including auditing systems, conducting penetration tests, and applying the Risk Management Framework (RMF). You will utilize tools such as NMAP and Wireshark for vulnerability testing and be involved in formulating IT security policies that align with best practices.

Candidates for the Information Systems Security Engineer role must hold a Bachelor's degree in Computer Science or a related discipline, possess a TS/SCI security clearance with an active polygraph, and have at least fourteen years of relevant experience. Certifications like ISSEP and CISSP are necessary to ensure compliance with DoD 8570, showcasing your expertise in the field.

To excel as an Information Systems Security Engineer at Constellation Technologies, it is essential to have hands-on experience implementing Defense in Depth principles, assessing network security, and managing IT security policies. Familiarity with security tools, incident response, and scripting methodologies is a plus, along with a proactive approach to problem-solving in a dynamic tech environment.

Strong verbal and written communication skills are vital for an Information Systems Security Engineer at Constellation Technologies. You'll need the ability to convey complex security concepts clearly, collaborate effectively with teammates across various projects, and prioritize tasks in a fast-moving atmosphere while adhering to best practices.

The pay range for the Information Systems Security Engineer position at Constellation Technologies varies from $140,000 to $265,000 annually, depending on the level of experience and qualifications. Employees benefit from comprehensive healthcare options, including employer-paid premiums, a generous retirement plan with a company match, unlimited access to training programs, and a collaborative work environment encouraging professional growth.

In approaching vulnerability assessments, I systematically leverage tools like Nessus and NMAP, starting with a thorough understanding of the system architecture and identifying potential weaknesses. I follow up with detailed reporting and remediation strategies to enhance security measures based on RMF standards.

Certainly! My experience with the Risk Management Framework (RMF) encompasses all phases, from categorization to assessment and continuous monitoring. I ensure each system complies with baseline security requirements while aligning with organizational and federal security standards, assisting teams in successfully implementing risk mitigation strategies.

I find Python and Bash to be particularly useful scripting languages in my role as an Information Systems Security Engineer. Python aids in automating security tasks and tool integrations, while Bash scripts enhance system administration and configuration. Mastering both has increased efficiency in my workflow significantly.

In one scenario, I identified a critical vulnerability in our web application during routine audits. By performing a comprehensive assessment and collaborating with the development team, I implemented necessary patches and updated security policies, effectively mitigating the risk before any potential breach could occur.

My strategy for ensuring compliance with DoD regulations such as 8570 involves continual education and maintenance of my certifications, alongside proactive internal audits. I ensure that my team is also educated about compliance requirements, promoting a shared responsibility for security across the organization.

I stay updated on the latest cybersecurity threats and trends through various channels, including attending industry conferences, participating in webinars, subscribing to cybersecurity journals, and engaging in professional networks. Continuous learning plays an essential role in my ability to protect our systems effectively.

I have extensive experience with penetration testing, where I simulate attacks on our systems to evaluate security postures. Utilizing tools like Metasploit and Burp Suite, I document vulnerabilities and provide actionable recommendations to enhance defenses based on the findings.

The most challenging aspect of my role as an Information Systems Security Engineer often involves balancing security measures with operational efficiency. Ensuring that security implementations don’t hinder user experience, while still maintaining stringent protections, is a continual challenge that requires creative problem-solving.

When handling multiple security projects, I prioritize tasks based on urgency and impact analysis. I assess the scope of potential risks each project presents and align them with organizational objectives, ensuring critical vulnerabilities are addressed promptly without losing sight of long-term security goals.

Collaboration is essential in an Information Systems Security Engineer role because cybersecurity requires a holistic approach. Engaging with cross-functional teams cultivates a comprehensive understanding of security needs, making it easier to implement effective strategies while also fostering a culture of security awareness within the organization.