Information System Security Engineer

Everforth ECS is seeking an Information System Security Engineer to work in our Stafford, VA office.  

The Everforth ECS Team provides focused Agile software development and maintenance for CODIS, a mission-critical application for the FBI. CODIS supports a database repository of DNA profiles from individuals, unsolved crime scene evidence, and missing persons. CODIS software allows local, state, and national laboratories to compare DNA profiles electronically, thereby linking serial crimes to each other and identifying suspects by matching DNA profiles from crime scenes to individuals’ profiles.

Responsibilities

• Work in the Security & Infrastructure team for cloud-based development in AWS
• Responsible for the secure design, analysis, and test of information security systems and products.
• Ensure technical documentation exists for all systems and is kept up to date to include system security plans, business impact analyses, continuity of operations plans, mitigations, authorized software lists, authorized hardware lists, and elevated user access lists and roles.
• Create and update security test plans for detecting and mitigating risks to information systems.
• Engineer and perform tests and test plans to satisfy audits. Evaluate, validate and implement solutions for mitigating information systems findings or risks.
• Apply methods, standards and approaches for ensuring the baseline security safeguards are appropriately implemented and documented.
• Advise on a range of security related activities such as establishing system boundaries, assessing the severity of system weaknesses and deficiencies, security alerts and potential adverse effects of vulnerabilities.
• AWS network and security support
• Occasional need for off-hours support for system upgrades, patches and maintenance activities

• Active Secret clearance
• At least 4 years of experience working with security architecture, vulnerability management, incident response, and network security tools.
• Current Security+ certification (or greater) or the ability to obtain within 6 months
• System Administration experience
• Strong attention to detail and solid troubleshooting ability
• AWS console administration experience
• Experience with security settings implementation