Enterprise - Information Systems Security Engineer - DIACAP, TCP/IP, STIGs

San Antonio, TX

Erias Ventures was founded to serve its customers with an entrepreneurial mindset. We value creative problem-solving, open communication, and empowering our employees to make decisions and put forth new ideas. Our staff includes technical experts working across multiple disciplines, bringing diverse perspectives to every project. We are seeking engineers who wish to grow their careers and want to become part of a technically strong and growth-oriented company focused on bringing innovative solutions to the difficult mission problems facing our customers. Description We are seeking an Information Systems Security Engineer (ISSE). The candidate will perform system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements. The candidate should understand distributed architectures and cloud-based systems for big data applications. Must be willing to work a hybrid schedule and be flexible to accommodate any schedule changes as needed. Will create, review and edit authorization documentation for completeness and accuracy in accordance with federal and DoD policy Thoroughly understand and be able to implement DoD RMF system accreditation processes Assess use case and operational risk of integrated open source, and GOTS/COTS software components Will use vulnerability management systems, automated security scanning tools, and system accreditation record systems Must be able to grasp new concepts, facilitate information exchanges for data gathering, and collaborate with diverse audiences Must be able to interpret and apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) Will follow established processes where applicable, and establish and execute defensible processes where none are prescribed Provide security planning, assessment, risk analysis, and risk management support Recommend system-level solutions to resolve security requirements and guide the development team in meeting the security posture requirements Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures Must apply existing knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments Must be able to interact well with others to complete work Other duties as assigned This position offers partial telework. Clearance Must currently have and maintain an active Secret U.S. Government Security Clearance; U.S. Citizenship required. Experience Nine plus (9+) years of experience as an ISSE or security-focused software / systems engineer with large multi-tiered programs and Bachelors in related field; or seven (7) years relevant experience with Masters in related field; or High School Diploma or equivalent and thirteen (13) years relevant experience. Required skills: Experience implementing DoD system accreditation processes (DIACAP acceptable and RMF preferred) A working knowledge of TCP/IP suite of protocols and services, computer architectures, and network topologies is required An understanding of the underlying framework, control inheritance, and artifact generation utilizing the NIST SP 800-53 DoD 8140 compliance with IAT Level II (SSCP, Security+, CCNA-Security, or GSEC certification) Experience with DISA STIGs and SRGs, vulnerability management systems, mitigation and compliance processes, and reviewing results from automated security scanning tools The ability to work independently and as part of a team is needed Prior hands-on experience navigating workflows, uploading artifacts, managing POA&Ms in eMASS & Xacta or equivalent RMF system of record Must be able to work in a hybrid environment, spending an average of 1-2 days per week at our San Antonio, TX office. Flexibility is essential to adapt to schedule changes as needed Desired skills: CISSP-ISSEP is highly desired BASH Kubernetes Visio/draw.io RHEL AWS Cloud Benefits Erias Ventures provides a complete package of wealth, health, and happiness benefits. The expected salary range for this position, depending on education and years of experience is $150,000 - $250,000. Wealth Benefits: Above Market Hourly Pay 11% Roth or Traditional 401k with Immediate Vesting and Deposit Spot Bonuses for Assisting with Business Development and Company Growth Professional Development Bonuses for Certificates and Degrees Health Benefits: Company subsidized Medical Coverage 100% Company Paid Vision and Dental Coverage 100% Company Paid Long Term Disability, Short Term Disability, and Group Life Insurance Monthly Wellness Reimbursement Happiness Benefits: Paid Time Off with Flexible Work Schedules and Birthday Off Amazon Prime Membership and Monthly Internet Reimbursement Technology and Productivity Allowance for Equipment and Supplies Morale Building and Company Events to Celebrate our Successes and Build our Community Onboarding and Annual Swag Company Paid Professional Development and Training At Erias Ventures, we are dedicated to fostering a diverse and inclusive workplace. As an equal opportunity employer, we ensure that all qualified applicants are considered for employment based on merit, without discrimination. We welcome individuals regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. Referrals & Inquiries Do you know a cleared professional seeking to advance their career? Interested in earning some extra cash? If so, refer them to us with their name and contact details, and you could be eligible for a referral bonus of up to $10,000 for each successful hire. Not seeing the right position right now? Reach out to us, and we’ll notify you as new contracts and opportunities become available! Please send referrals and inquiries to: [email protected] To learn more about our company visit our webpage or LinkedIn.

creative problem-solving

open communication

empowering our employees

technically strong

growth-oriented

innovative solutions

Description

We are seeking an Information Systems Security Engineer (ISSE). The candidate will perform system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements. The candidate should understand distributed architectures and cloud-based systems for big data applications. Must be willing to work a hybrid schedule and be flexible to accommodate any schedule changes as needed. Will create, review and edit authorization documentation for completeness and accuracy in accordance with federal and DoD policy Thoroughly understand and be able to implement DoD RMF system accreditation processes Assess use case and operational risk of integrated open source, and GOTS/COTS software components Will use vulnerability management systems, automated security scanning tools, and system accreditation record systems Must be able to grasp new concepts, facilitate information exchanges for data gathering, and collaborate with diverse audiences Must be able to interpret and apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) Will follow established processes where applicable, and establish and execute defensible processes where none are prescribed Provide security planning, assessment, risk analysis, and risk management support Recommend system-level solutions to resolve security requirements and guide the development team in meeting the security posture requirements Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures Must apply existing knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments Must be able to interact well with others to complete work Other duties as assigned This position offers partial telework.

Will create, review and edit authorization documentation for completeness and accuracy in accordance with federal and DoD policy

Thoroughly understand and be able to implement DoD RMF system accreditation processes

Assess use case and operational risk of integrated open source, and GOTS/COTS software components

Will use vulnerability management systems, automated security scanning tools, and system accreditation record systems

Must be able to grasp new concepts, facilitate information exchanges for data gathering, and collaborate with diverse audiences

Must be able to interpret and apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)

Will follow established processes where applicable, and establish and execute defensible processes where none are prescribed

Provide security planning, assessment, risk analysis, and risk management support

Recommend system-level solutions to resolve security requirements and guide the development team in meeting the security posture requirements

Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures

Must apply existing knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments

Must be able to interact well with others to complete work

Other duties as assigned

This position offers partial telework.

This position offers partial telework.

Clearance Must currently have and maintain an active Secret U.S. Government Security Clearance; U.S. Citizenship required.

Clearance

Experience

Experience implementing DoD system accreditation processes (DIACAP acceptable and RMF preferred)

A working knowledge of TCP/IP suite of protocols and services, computer architectures, and network topologies is required

An understanding of the underlying framework, control inheritance, and artifact generation utilizing the NIST SP 800-53

DoD 8140 compliance with IAT Level II (SSCP, Security+, CCNA-Security, or GSEC certification)

Experience with DISA STIGs and SRGs, vulnerability management systems, mitigation and compliance processes, and reviewing results from automated security scanning tools

The ability to work independently and as part of a team is needed

Prior hands-on experience navigating workflows, uploading artifacts, managing POA&Ms in eMASS & Xacta or equivalent RMF system of record

Must be able to work in a hybrid environment, spending an average of 1-2 days per week at our San Antonio, TX office. Flexibility is essential to adapt to schedule changes as needed

Desired skills:

CISSP-ISSEP is highly desired

BASH

Kubernetes

Visio/draw.io

RHEL

AWS Cloud

Benefits Erias Ventures provides a complete package of wealth, health, and happiness benefits. The expected salary range for this position, depending on education and years of experience is $150,000 - $250,000. Wealth Benefits:

Benefits

Wealth Benefits:

Above Market Hourly Pay

Above Market Hourly Pay

11% Roth or Traditional 401k with Immediate Vesting and Deposit

11% Roth