• Location: Chantilly, Virginia
• Type: Contract
• Job #3068

Title: Information Systems Security Engineer
Location: Chantilly, VA
*Clearance: *Active TS/SCI w/ Polygraph needed to apply *
Company Overview:
Cornerstone Defense is the Employer of Choice within the Intelligence, Defense, and Space communities of the U.S. Government.  Realizing early on that our most prized assets are our employees, we continually focus our attention on improving the overall work/life experience they have supporting the mission.  Our Team is pushed every day to use their industry leading knowledge to provide end-to-end solutions to combat our nation’s toughest and most secure problems.  If you are looking for a place to not only be professionally challenged, but encouraged and supported by a company that cares, don’t look any further than Cornerstone Defense.

In this role you will work on the design and implementation of IT services that adhere to required security guidelines and configurations. You will support security taskings for technical security efforts. 

Primary Responsibilities

• Provides solutions to highly challenging and complex system-wide information security requirements based upon the analysis of user, policy, regulatory, and resource demands.
• Integrating security requirements in the development, design and application of solutions implemented by staff members.
• Identify security control requirements
• Plan code scanning to identify vulnerabilities
• Manage and review security logs and taking required actions
• Applies expertise to systems, as well as to dedicated special purpose systems requiring specialized security features, system security configuration and procedures. 
• Supports Authorization and Accreditation (A&A) across the design lifecycle for classified systems obtaining and maintaining Interim Authority to Operate (ATO), ATO and Authority to Connect (ATC).
• Remediation and mitigation of identified vulnerabilities by developing plan of action and milestones (POA&Ms).

Basic Qualifications

• Must have an active TS/SCI with Polygraph to be considered for this role.
• Demonstrated experience with navigating the Assessment and Authorization (A&A) process
• Experience in developing and implementing information security controls, procedures, and documentation for the operations of systems.
• Experience with Ongoing Authorizations and Assessments
• Assess/calculate risk based on threats, vulnerabilities, and shortfalls uncovered in testing Identify mitigating solutions
• Experience with the NIST Risk Management Framework (RMF)
• Experience with Agile Software Development