Information security engineer

- Collaborate with the Information System Security Manager (ISSM) to define and refine information security requirements and ensure their incorporation into IT components and systems through effective security design and configuration. - Conduct vulnerability assessments to identify weaknesses and exploit paths within systems and networks using approved commercial and government tools, applying security testing methodologies and frameworks to evaluate threats and suggest countermeasures to assure mission continuity. - Execute cybersecurity analysis, identification, and remediation of intricate compliance requirements across IT systems and applications, including various operating systems and database technologies. - Offer remediation advice and strategies to mitigate vulnerabilities, keeping up-to-date with STIG/SRGs and tools such as Tenable Nessus and SCAP compliance tools. - Participate in change management procedures to correct, apply, and mitigate vulnerabilities via security updates, patches, and secure configurations. - Assist in the development and documentation of cybersecurity processes and procedures for Authorization to Operate (ATO) packages, enhancing the cybersecurity programs effectiveness. - Utilize eMASS for managing ATO packages efficiently. - Prepare and maintain necessary security documentation like System Security Plans (SSPs) and Security Assessment Reports. - Install, configure, and manage Trellix products to ensure compliance. - Establish, adjust, and enforce security policies through the ePO console to align with security standards and compliance needs. - Troubleshoot Splunk issues between the server and forwarder, create custom dashboards, and apply best practices for optimal performance. - Administer and maintain the Tenable Security Center and review ACAS results for appropriate remediation actions.