Information System Security Engineer (ISSE)

PLEX Solutions, A Part of Markon is seeking an Information System Security Engineer in the Annapolis Junction, MD area.

Position overview:
Security Engineering and Authorization

• Perform and review technical security assessments of the computing environment to identify vulnerabilities and non-compliance with established Information Assurance standards, and recommend mitigation strategies.
• Validate and verify system security requirements, and establish and maintain system security designs across networking, computing, and enclave environments, including enclaves with differing data protection and classification requirements.
• Build Information Assurance into systems deployed to operational environments, and support the customer's security architecture and the trusted relationships among connected systems.
• Assess and mitigate system security threats and risks throughout the program life cycle, and contribute to security planning, risk analysis, and risk management activities.
• Support security authorization activities in compliance with the DoD Risk Management Framework and the NIST RMF process, and review certification and accreditation documentation for completeness and compliance.

TECTIX Deployment

• Install, configure, and validate TECTIX in the customer environment across the supported deployment paths, including AWS GovCloud and on-premises or disconnected installations.
• Provision and configure supporting services, including containers and required managed database resources.
• Execute and verify installation against the user’s guide and industry best practices, and document environment-specific deviations back to the product team.

Maintenance and Sustainment

• Apply platform updates, patches, and configuration changes on a defined cadence with minimal disruption to the customer, under disciplined configuration and change control.
• Maintain STIG compliance for the deployment, including a workable STIG update approach for disconnected environments.
• Monitor container, database, and application health, and remediate issues before they affect users.
• Manage vulnerability scan results, software bill of materials (SBOM) validation, and integrity hash verification as part of ongoing security posture upkeep.

RMF Tooling and Customer Support

• Support the customer's use of TECTIX to produce and maintain RMF artifacts, including System Security Plans, control implementation statements, POA&Ms, and assessment evidence.
• Assist with eMASS integration and data flows between TECTIX and the customer's authorization tooling.
• Provide Tier 1 and Tier 2 support to customer users, deliver user training, and maintain customer-facing operational documentation.
• Capture enhancement requests and defects, and coordinate resolution with the TECTIX development team

,

Required Skills

• Active TS/SCI with a current CI polygraph.
• Demonstrated depth in the RMF authorization lifecycle, including NIST 800-37, NIST 800-53, security control assessment, and certification and accreditation review.
• System security engineering experience across networking, computing, and enclave environments, including environments with differing classification levels.
• Solid IT engineering background, including Linux system administration, basic networking, and comfort operating in a command-line environment.
• Working software aptitude sufficient to read logs, interpret configuration files, understand containerized applications, and troubleshoot deployment issues.
• Strong customer service and communication skills, with the ability to translate between technical detail and customer stakeholders.
• DoD 8140/8570 IAM or IAT baseline certification appropriate to the task order at time of hire (for example, Security+ at minimum).

,

Desired Skills

Desired Qualifications:

• CISSP, CGRC (formerly CAP), or equivalent RMF/GRC certification.
• Hands-on experience with GRC or authorization tooling such as eMASS, Xacta, or similar.
• AWS GovCloud experience, including ECS/Fargate, and container tooling such as Docker and Docker Compose.
• PostgreSQL administration and general database troubleshooting.
• STIG and SCAP experience, container hardening, and vulnerability management workflows.
• Prior experience supporting an Intelligence Community or DoD customer in a classified environment.

,

About PLEX Solutions, LLC

Break Free from the Typical

PLEX leads the industry in advanced, tailored cybersecurity solutions, software development and technology engineering for commercial and government clients. We blend cutting-edge technologies, tactics and procedures with deep mission experience and customize solutions to fit your organization. Our bleeding edge cybersecurity and technology experts are the most talented in their field. We are driven professionals with a passion for the work and an authenticity that is recognized in our industry … we work smart – and hard – laugh as much as possible and give the best fist-bumps in the community.

PLEX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

The salary range is a general guideline for each position. The actual salary is determined by specific program, labor category, education/certifications, professional experience and security clearance levels. As a government contractor the labor category minimum qualifications determine suitability of each candidate and the corresponding salary allowable. PLEX Solutions also provides annual discretionary profit-sharing bonuses for our employees. Additionally, PLEX Solutions invests in our professionals with a variety of benefits listed below.

Benefits Include:
Flexible Time Off

Medical Plan 100% Employee Coverage

401K Contribution

Education and Training Benefit

Bonus Plan

And many more!

Pregnant workers fairness act - https://www.govinfo.gov/content/pkg/FR-2024-04-19/pdf/2024-07527.pdf

Employee Rights poster - https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo\_posters/employeerightsposter11x17\_2019final.pdf

Pre-Employment Reasonable Accommodation(s)PLEX Solutions, LLC is committed to bringing in a diverse group of individuals to build and grow our team. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact us for assistance using the CONTACT US link below to call or email for assistance.https://plex-llc.com/contact-us/

Please have the following information so we may assist you:
Your name & contact information (Email and/or phone number)

Please label the subject of the email: Application Accommodation request

Describe the specific accommodation(s) you require to find positions and apply