Skip to content

Open nowPosted 42 days ago

Information Systems Security Engineer

Systems Planning and Analysis445 open roles

Where
Alexandria, Virginia, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInformation Systems Security EngineerSystems Planning and Analysis · Alexandria, Virginia, United States
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Systems Planning and Analysis's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. Systems Planning and Analysis postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 42 days ago

Systems Planning and Analysis median: 1 days open

The posting

Overview

Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in spirit and practice, producing Results that Matter. Come work with the best! We offer opportunity, unique challenges, and clear-sighted commitment to the mission. SPA: Objective. Responsive. Trusted.

The Cybersecurity Team under SPA’s Information Technology Department establishes and maintains a robust cybersecurity posture and policy architecture across SPA's information systems. The team manages cyber policy, develops control implementations and system security plans, continuously monitors SPA systems, and performs routine cyber operations including patching, auditing, and incident response. Cybersecurity is critical to SPA's mission, therefore we strive to offer secure solutions that ensure data is protected while meeting the needs of the business.

In this role, you will serve as the Information Systems Security Engineer (ISSE) for multiple classified systems operating at SPA's Headquarters in Alexandria, VA and nearby satellite office locations. This requires the individual to operate with autonomy as the lead operator for many of SPA's defensive cyber tools. This role also serves as the primary point of contact between SPA and government Cybersecurity Service Providers (CSSPs) that support SPA's classified infrastructure.

SPA has an immediate or near-term need for an ISSE.

Responsibilities

The Information System Security Engineer (ISSE) handles daily security operations and continuous monitoring for classified networks, with a heavy focus on ACAS and Trellix ESS tools. In this role, you will run regular reviews and technical inspections to find and fix security vulnerabilities. You will perform system audits, handle incident response tasks, and track technical security guidance across the network. You will collaborate with networking teams to build accurate asset lists, configure ACAS policies using current best practices, and run daily vulnerability scans on SIPR networks. Daily tasks include checking dashboards for login failures, high vulnerability counts, or highly exploitable vulnerabilities. You will troubleshoot credential issues, work with system and network admins to resolve authentication problems within a week, and send compliance reports to leadership every two weeks. You will also run weekly discovery and compliance scans, manually upload monthly DoD audit files, and set up Nessus agents. Additionally, you will maintain the latest Trellix point products on Windows and Linux systems, perform DISA STIG reviews, and manage compliance dashboards. You will coordinate with the CSSP to ensure ACAS and ESS tools are working properly, resolve data reporting issues, and help the team prepare for DCSA Technical Reviews, incident response reviews, and Cyber Operational Readiness Assessments (CORA).

Qualifications

Required Qualifications:

  • Bachelor’s degree in an Information Technology related field or equivalent work experience and certifications.
  • Four (4) or more years of related work experience in information system security with at least one (1) year directly supporting classified systems.
  • Must meet DoD 8140 certification requirements at IAM Level I or higher (such as Security+ CE, CAP, or GSLC).
  • Ability to work independently and handle tasks with minimal supervision.
  • Active DoD Top Secret security clearance.
  • Solid understanding of networking basics, including IP routing, subnets, firewalls, VLANs, ports, and protocols.
  • Practical knowledge of the Risk Management Framework (RMF) and NIST 800-53 controls.

Desired Qualifications:

  • Hands-on experience installing, configuring, and troubleshooting Trellix Endpoint Security (ESS) products.
  • Experience performing vulnerability management using tools like ACAS, Nessus, or Tanium.
  • Experience reviewing EventLogs, Syslogs, and Splunk logs to troubleshoot technical errors.
  • Experience configuring systems using DISA Security Technical Implementation Guides (STIGs) and STIG Viewer.
  • Linux and Windows administration experience, specifically for solving credential and Trellix installation issues.
  • Prior experience with DCSA reviews or direct involvement with Cyber Operational Readiness Assessments (CORA).

Many jobs at SPA require obtaining, holding, and maintaining eligibility for a designated clearance based on the company and/or client contract requirements. Should it be required, an individual must be able to obtain the appropriate clearance within a reasonable amount of time based on the needs of the client. In some cases, the individual may need the requisite clearance before being able to be actively employed. Additionally, due to the protected nature of the work process and product at SPA, all positions require the execution of the SPA Non-Disclosure Agreement (NDA). Some employees may be required to sign additional documents or complete other pre-employment or ongoing testing.

SPA employees typically work in a variety of office settings, some at an SPA office and some at designated client locations, where daily activities may include, but are not limited to, walking, standing, or sitting for extended periods, using computers and other technology, and being sequestered in SCIFs or other secured areas with limited access to outside resources or privacy. Other security requirements may inform dress code, personal accessories permitted, or technology usage. When applicable, employees are required to comply with the terms and conditions of client contracts as specified by SPA in its sole discretion, including, but not limited to, hours, location, timing, and technology usage, that meet logistical and security work requirements.

Pay Range Information

At SPA, we strive to deliver a robust total compensation package that will attract and retain top talent. Elements of the compensation package include competitive base pay and variable compensation opportunities. SPA provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, etc. Please note that the salary information shown below is a general guideline only. Salaries are commensurate with experience and qualifications, as well as market and business considerations. Virginia, Pay Transparency Salary range: USD $110,000.00/Yr. - USD $155,000.00/Yr.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Systems Planning and Analysis's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Systems Planning and Analysis's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Systems Planning and Analysis's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.