Information Systems Security Engineer I

The Information Systems Security Engineer I will have responsibility to support the security planning, assessment, risk analysis, and risk management support on programs involving cyber security engineering. Will also recommend system-level solutions to resolve security requirements and guide the development team in meeting the security posture requirements. This role supports active TCOM programs under the Systems Engineering department.

Working Procedure

• Implement the Cybersecurity requirements of IT systems and applications documenting them in formal security engineering documents using Risk Management Framework and supporting artifacts associated with risk assessments.
• Implement IT security solutions and ensure successful implementation.
• Apply knowledge of security principles, policy, and regulations to daily tasking.
• Conduct security compliance evaluations on IT products using all source analysis, test lab, and apply test results to create secure configuration guidelines and baselines.
• Provide input to A&A process activities and related documentation such as security concept of operations, systems security plans, security control assessments, contingency plans, configuration management plans, incident response plans, plan of actions and milestones, risk management plans, vulnerability and compliance scanning, and/or vulnerability management plans.
• Support the program related cyber engineering tasks and associated CDRLS on programs requiring cyber engineering.
• Verify stability, interoperability, portability, security, or scalability of system architecture.
• Collaborate with engineers or software developers to select appropriate design solutions or ensure the compatibility of system components.
• Perform technical security assessments of computing environments to identify points of vulnerability, non-compliance, with established Information Assurance (IA) standards and regulations and recommend mitigation strategies.
• Review Plans of Actions and Milestones (POA&Ms) to ensure weaknesses are identified, effective/acceptable mitigation strategies are planned, and timelines are acceptable and on track.
• Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness of activities for system and networking operations.
• Perform other duties and responsibilities as assigned.
  
  

Education Requirement: BS or BA in Computer Science, Information Assurance, Computer Engineering, or related discipline.

Experience Requirement: A minimum of 2 years of relevant experience is required.

In compliance with state and local laws, the salary range for this role is $110k-$140k. The range provided is a general guideline and good faith estimate representative of all experience levels but is not a guarantee of compensation or salary. TCOM considers several factors when extending an offer including, but not limited to, the scope and responsibilities of the position, a candidate’s experience, education/training, key skills, internal equity, and current market conditions. Employees may be eligible for a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results.