Senior Information Systems Security Engineer (ISSE)

Own Your Future.

Modern Technology Solutions, Inc. (MTSI) is seeking a Information Systems Security Engineer (ISSE) to join our team in the Washington, DC area.  Your primary function will be to work with Special Access Programs (SAPs) supporting Department of Defense (DOD), Headquarters United States Air Force, and MTSI Operations.  

Why is MTSI known as a Great Place to Work?

• Interesting Work:  Our co-workers support some of the most important and critical programs to our national defense and security.  
• Values: Our first core value is that employees come first.  We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry. 
• 100% Employee Ownership: we have a stake in each other's success, and the success of our customers.  It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.  
• Great Benefits - Most Full-Time Staff Are Eligible for: 
• Starting PTO accrual of 20 days PTO/year + 10 holidays/year
• Flexible schedules
• 6% 401k match with immediate vesting
• Semi-annual bonus eligibility (July and December)
• Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account
• Up to $10,000 in annual tuition reimbursement
• Other company funded benefits, like life and disability insurance
• Optional zero deductible Blue Cross/Blue Shield health insurance plan
• Track Record of Success:  We have grown every year since our founding in 1993

Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance.

MTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.

For more information about MTSI, please visit www.mtsi-va.com.

As a Information Systems Security Engineer (ISSE) with MTSI you will perform serve as the Program Office’s information security professional responsible for managing all aspects of an organization's information security system, including researching, testing, training, and implementing programs designed to safeguard sensitive information from possible compromise. The ISSE works with System Engineering teams to incorporate cyber resiliency objectives, techniques, and design principles into all system engineering and development efforts throughout the systems development life cycle (SDLC).

Specific Job Duties:
Provide Information Systems Security Engineer support to the government program manager that:

• Develop and maintain documentation and diagrams for security tools, system environments, and cloud operations
• Work within a DevOps security model so that security is automated and elastic across all cloud platforms
• Identify security-sensitive functionality in apps and services lacking security coverage and build out automation to bring security awareness into the affected areas
• Identify novel attacks and security weaknesses within the system; automate their discovery using innovative techniques, methods, and tools.
• Perform requirements analysis, design, and integration for complex software applications and collaboration infrastructures
• Participate in the change management process, including reviewing Change Requests and assisting in the assessment of security impact of proposed changes
• Write implementation and design documents describing how security features are implemented
• Create and maintain information system security documentation, Standard Operating Procedures (SOP), and provide guidance on active Plans of Action and Milestones (POA&M)
• Conduct periodic and continuous monitoring of the system, procedures, and documentation to ensure compliance with the authorization package

Required Skills, and Experience:

• Must have experience working with Special Access Programs (SAPs)
• Strong proficiency in Cloud architecture, fault tolerance, and Reliability, Maintainability, Availability (RMA) subject matter.
• Understanding of the requirements and standards for Cloud security
• Must possess excellent analytical skills and be capable of quantifying risk to enterprise systems and level of compliance with security policy
• 12+ years' technical experience in cybersecurity, information technology, or systems engineering
• Excellent communication skills (verbal and written) required

Advanced knowledge in one or more of the following areas:

• Software Development in Java, Python, Ruby and/or C++
• Linux Expertise (RedHat/RHEL or CentOS preferred)
• Dynamic & Static Application Security Scanning (e.g., Arachni, OWASP ZAP, BurpSuite, Fortify, Checkmarx, etc.)
• Virtualization and containers (EC2, Docker)
• Infrastructure Security Scanning, Vulnerability Scanning (Twistlock, ACAS/Nessus)

Certification Requirements in one or more of the following:

• Certified Information Systems Security Professional (CISSP).
• Certified Cloud Security Professional (CCSP).
• Information Systems Security Engineering Professional (ISSEP)
• DOD Information Technology Security Certification and Accreditation Process (DITSCAP)
• DOD Information Assurance Certification and Accreditation Process (DIACAP)

Education Requirements:

• Bachelor’s degree in engineering, computer science, cybersecurity, networking, or programming (Master’s degree DESIRED)

Clearance Requirements:

• Current TS (SCI & SAP eligibility required); an active TS/SCI clearance is desired.  Subject to a Counterintelligence (CI) polygraph.
• U.S. Citizenship is required for this position.

#LI-LS1

#mtsi