Information Systems Security Engineer (ISSE)

Information Systems Security Engineer (ISSE)

Job Location: Remote

Eligibility/Clearance: Must be able to obtain and maintain a Public Trust and successfully pass a thorough Government background screening process requiring the completion of detailed forms and fingerprinting

This position has a U.S. residency requirement. The USPS security clearance process requires the selected candidate to have resided in the U.S. (including U.S. Territories) for the last five years as follows: U.S. Citizens cannot have left the U.S. (including U.S. Territories) for longer than 6 months consecutively in the last 3 years (unless they meet certain exceptions). Non-U.S. Citizens cannot have left the U.S. (including U.S. Territories) for longer than 90 days consecutively in the last 3 years.

Job Description Summary: Seize your opportunity to make a personal impact as a Information Systems Security Engineer (ISSE). We are seeking a highly skilled Information Systems Security Engineer with over 5 years of experience in Application Modernization to join our dynamic team. The position will play a critical role in the modernization of the Delivery Operations Information System (DOIS) for the United States Postal Service (USPS). The Information Systems Security Engineer will ensure the security of the DOIS modernization project for USPS by implementing robust security measures and maintaining compliance with federal security standards. The individual will leverage AI tools such as GitHub Copilot for security automation and vulnerability management.

We are excited to welcome a motivated Information Systems Security Engineer who is passionate about creating exceptional user experiences and driving innovation in web development. Join us in shaping the future of our products and services through cutting-edge technology!

How An Information Systems Security Engineer Will Make An Impact:

• Develop, implement, and maintain security policies, procedures, and controls in alignment with USPS's security requirements and federal standards (e.g., FISMA, NIST RMF).
• Utilize AI tools like GitHub Copilot to automate security tasks, vulnerability scans, and code reviews.
• Conduct regular security assessments, vulnerability scans, and penetration testing using tools such as Nessus, Splunk, and SonarQube.
• Implement and monitor security measures for sensitive data, ensuring compliance with encryption standards and access controls.
• Work with development and operations teams to integrate security practices within CI/CD pipelines and DevSecOps processes.
• Prepare and maintain security documentation, including System Security Plans (SSP), Risk Mitigation Plans (RMP), and Plan of Action and Milestones (POA&M).
• Ensure continuous monitoring and real-time security incident response using tools such as CloudWatch, GuardDuty, and AWS Security Hub.
• Collaborate with the USPS Chief Information Security Office (CISO) to ensure compliance with USPS's security architecture and governance.
• Provide security training and awareness programs to development and operational staff.

What You'll Need To Succeed:

• Education: Bachelor's degree in Computer Science, Information Technology, Cyber Security, or related fields, preferred but not required. If there is no relevant college degree, an additional 4 years of relevant work experience is required.
• Required Experience: 5+ years of experience in information security engineering, with a strong focus on cloud security. Experience with AI tools, particularly GitHub Copilot, for security automation and vulnerability management. Strong understanding of federal security standards and compliance requirements (e.g., FISMA, NIST, FedRAMP).
• Required skills: Proficiency in security tools and frameworks (e.g., Nessus, Splunk, NIST RMF). Excellent analytical, problem-solving, and communication skills. Able to manage multiple tasks effectively and meet deadlines. Ability to work collaboratively with developers, business analysts, and stakeholders.
• Desired Skills: Security Certifications (e.g., CISSP, CISM, AWS Certified Security - Specialty). Experience in a USPS environment or similar federal IT projects. Certification in cybersecurity (e.g., Certified Ethical Hacker (CEH)).

Location: Remote

Arena Technical Resources, LLC, (ATR) is an Equal Opportunity Employer (EOE) who will provide equal employment opportunity to employees and applicants for employment without regard to race, ethnicity, religion, color, sex, pregnancy, national origin, age, veteran status, ancestry, sexual orientation, gender identity or expression, marital status, family structure, genetic information, or mental or physical disability.