Senior Principal Information Systems Security Engineer (ISSE)

US CITIZENSHIP REQUIRED FOR THIS POSITION: YesRELOCATION ASSISTANCE: No relocation assistance availableCLEARANCE TYPE: PolygraphTRAVEL: NoDescriptionPeraton drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the worlds leading mission capability integrator and transformative enterprise IT provider, we deliver trusted and highly differentiated national security solutions and technologies that keep people safe and secure. Peraton serves as a valued partner to essential government agencies across the intelligence, space, cyber, defense, civilian, health, and state and local markets. Every day, our 22,000 employees do the cant be done, solving the most daunting challenges facing our customers.Were seeking a Senior Principal Information Systems Security Engineer (ISSE) who will be responsible for integrating information assurance disciplines into the system design, development, integration, and implementation. Identifying Information Protection needs and defining System Security Requirements; designing System Security Architecture; developing detailed Security Designs (in cluding system security certifications and project evaluations). This individual will be experienced with Defense in Depth principles and technology including access/control, authorization, Identification and authentication, public key infrastructure, network, and enterprise security architecture. This position will be located in Annapolis Junction, MD.#AJ2021Basic Qualifications:

• Bachelors degree and nine (9) years relevant experience or high school diploma and thirteen (13) years relevant experience
• Must have at least eight (8) years integrating information assurance disciplines into the system design, development, integration, and implementation;
• Must have experience identifying Information Protection needs and defining System Security Requirements; designing System Security Architecture; developing detailed Security Designs (including system security certifications and project evaluations);
• Must have experience assessing and auditing network penetration testing anti-virus planning assistance, risk analysis and incident response;
• Active TS/SCI with poly clearance required

• Experienced with Defense in Depth principles and technology including access/control, authorization, Identification and authentication, public key infrastructure, network, and enterprise security architecture;
• Developing security plans for employing enterprise-wide security architecture;
• Assessing and auditing network penetration testing anti-virus planning assistance, risk analysis and incident response;
• Applying security risk assessment methodology to system development, including threat model development, vulnerability assessments, and resulting security risk analysis;
• Enforcing the design and implementation of trusted relationships among external agency systems and architectures;
• Experienced with the implementation of cross domain solutions (i.e., an information assurance solution that provides the ability to manually and/or automatically access and/or transfer between two or more differing security domains);
• Developing security plans for systems that process information with different classifications and categories that simultaneously permits access by users with different security clearances and denies access to users who lack authorization;
• Knowledge of Federal, NSA, Intelligence Community and DoD Information Security regulations, publications, and policy;
• Knowledge of the NSA/CSS Information System Certification and Accreditation Process (NISCAP). More requirements an ISSO must have knowledge of or perform the following to meet the customer expectations:
• Risk Management Framework utilizing (XACTA)
• Vulnerability Management (Security Scans)
• Remediation Actions (Plan of Actions and Milestones (POA&M)
• Documentation Management
• Configuration Management
• Security Control Testing (NIST 800-53/CNSS1253)
• Security Status Reporting
• Account Management
• Software Assurance
• Event Management (Auditing)
• Malware Protection (Antivirus)
• Security Access Enforcement (PRIVAC)
• Site Visits
• Security Incident Management
• Contingency Plan Management
• Security Relevant changes
• New/Ongoing Risk Determination and Acceptance-Authorization/Reauthorization
• Information System Removal and Decommissioning