Job Description About Falconwood, Inc: Falconwood, Inc. is a small, woman/veteran-owned business providing executive level consultants and programmatic support to Department of Defense (DoD) Information Technology (IT) initiatives and programs. We provide expert consultation on a diverse range of IT subjects focusing on acquisition strategy, implementation activities and Information Assurance policy and engineering. We have an immediate opening for an Information Systems Security Engineer (ISSE). The ISSE will provide on-site administrative and technical Security Assessment and Authorization (A&A) and Continuous Monitoring (CM) support for Program Executive Office for Enterprise Information Systems (PEO EIS). As an integral part of the larger A&A cybersecurity team, assists Program(s) in the design and development of information systems (IS), as well as, changes to legacy systems. The ISSE reviews proposed new or modified IS designs to determine the adequacy of the security features and assurances and makes recommendations to the Program Manager for improvements. The ISSE implements security engineering principles to review security requirements, verify implementation, and development of mitigations in accordance with the Risk Management Framework (RMF) defined by the National Institute of Standards and Technology (NIST) and regulatory directives and guidelines for federal information systems and national security systems (ie, NIST SP 800-53, CNSS Instruction 1253, etc.). Job Code: PEO EIS ISSE Duty Location: Arlington, VA Travel Required: Occasional Travel Required ISSE duties includes but not limited to: Proficient involvement supporting multiple Operating Systems, Platform Information Technology (PIT) systems, Research, Development, Testing & Evaluation (RDT&E) and IS Applications. Expertise of systems engineering principles, requirements analysis, system development (software and hardware); network security architecture concepts (topology, protocols, components); and/or IT security principles and methods (firewalls, demilitarized zones, encryption) and Information Assurance Vulnerability Management (IAVM) policies and standards. Strong organizational skills with the ability to meet stringent deadlines; manage and prioritize tasks appropriately and track projects to completion. Ability to demonstrate analytical skills, technical knowledge, and practical application of cyber and information security principles to business leaders and technical staff. Ability to communicate network security issues to peers and management. Ability to develop and review concept of operations, systems security plans and define baseline system security requirements in accordance with applicable cybersecurity requirements. Capable of generating and maintaining documentation as it relates to infrastructure systems, design, configuration, support and processes. Experience planning, researching and developing security policies, standards and procedures. Utilization of compliance tools, technologies and methods (ie, ACAS, STIG and SCAP). Maintain an in-depth knowledge of emerging technologies and leverage critical thinking to incorporate the knowledge to interpret and implement security requirements into future releases; including Cloud Computing Technology. Required Qualifications: Bachelor's degree in Computer Engineering, Information Technology, Network Engineering, Systems Engineering, Computer Information Systems, Computer Science, Information Science, Information Systems or a related technical discipline with five (5) Years of experience Active Secret Clearance: Must be able to maintain the Secret Clearance. Must meet DoD 8570 Information Assurance Management Level II certification requirements at time of employment Understanding of Information Assurance processes, including DIACAP. Company Description Falconwood is a small, woman-owned business providing executive level consultants and programmatic support to Department of Defense Information Technology (IT) initiatives and programs. We provide expert advice and consultation on a diverse range of IT subjects focusing on acquisition strategy, implementation activities and Information Assurance policy and engineering. We support the total lifecycle of Information Technology systems and applications.