Associate Information Systems Security Engineer

The Associate Information Systems Security Engineer (ISSE) will ensure security controls are in place and operational, supports the execution of scans and security related tests and manages security logs. Conduct periodic assessments of authorized systems and provide the ISSM with corrective actions for all identified findings and vulnerabilities. Develop and implement security designs for new or existing network system(s). Ensure that the design of hardware, operating systems, and software applications adequately address cybersecurity requirements for the IS and Network Environment. Design, develop, and implement network security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation. Design, develop, and implement specific cybersecurity countermeasures for the IS and Network Environment. Analyzes the information systems to ensure that appropriate security functions have been included in the systems design and architecture. Recommend and implement changes to enhance systems security and prevent unauthorized access. Research security trends new methods, and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach. Provide guidance and direction on best practices for the protection of information. Safeguards the network against unauthorized infiltration, modification, destruction or disclosure. Develops, tests, and operates firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools. Implements, enforces, communicates and develops security policies or plans for data, software applications, hardware, and telecommunications.

Working Procedure:

• Verify stability, interoperability, portability, security, or scalability of system architecture.
• Aid in developing system engineering, software engineering, system integration, or distributed system architectures.
• Collaborate with engineers or software developers to select appropriate design solutions or ensure the compatibility of system components.
• Assist in performing technical security assessments of computing environments to identify points of vulnerability, non-compliance, with established Information Assurance (IA) standards and regulations.
• Enforce the design and implementation of trusted relations among external systems and architectures.
• Assess and mitigate system security threats/risks throughout the program life cycle.
• Generate Plans of Actions and Milestones (POA&Ms) to ensure weaknesses are identified, effective/acceptable mitigation strategies are planned, and timelines are acceptable and on track.
• Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness of activities for system and networking operations.
• Perform other duties and responsibilities as assigned.

Education Requirement: BS or BA in Computer Science, Information Assurance, Computer Engineering, or related discipline. DoD 8570/8140 compliant certifications are preferred.  

Experience Requirement: No prior experience required.

In compliance with state and local laws, the salary range for this role is $79,917 - $111,715. The range provided is a general guideline and good faith estimate representative of all experience levels but is not a guarantee of compensation or salary. TCOM considers several factors when extending an offer including, but not limited to, the scope and responsibilities of the position, a candidate’s experience, education/training, key skills, internal equity, and current market conditions. Employees may be eligible for a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results.

Benefits: TCOM offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts/HSAs, EAP, tuition reimbursement, parental leave, paid time off (PTO), and company-paid holidays. Programs and eligibility may vary based on hire date, classification, and schedule.