Information System Security Engineer

📋 Job Overview

Be Challenged and Make a Difference. In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

🏢 About AnaVation

AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operations.

🎯 The Role

AnaVation is looking for a dedicated Information System Security Engineer (ISSE) to join our team. This position is part of a talented technical team responsible for the ongoing development, operations, and maintenance of several networked systems supporting digital forensic investigations. These systems primarily run on Windows and utilize virtual and cloud environments.

✅ Key Responsibilities

• Develop compliance and standardization practices aligned with customer policies for various information systems.
• Work closely with Government customers to ensure the confidentiality, integrity, and availability of systems, applications, networks, and data.
• Support the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs, infrastructure and applications, Security Assessment and Authorization (SAA), IA Policy Directives (PDs) and Policy Guides (PGs), IA security tools such as Tenable.io, Nessus Pro, Nmap, and related technologies.

📌 Required Qualifications

• Ten (10) years of experience performing security requirement analysis, system design, of computer systems.
• Bachelor of Science degree in Computer Security or a related field. In lieu of education, an additional five (5) years of experience is required.
• Experience in a cyber-risk and compliance management system (e.g., Xacta, RiskVision, etc.).
• One (1) year experience or more configuring, performing, scheduling, reviewing, and assessing vulnerability (i.e., patches, updates, etc.) and compliance (i.e., Security Content Automation Protocol (SCAP) and/or Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG)) scans on the infrastructure and applications to ensure patch and configuration.
• Technical background that will assist in assessing the NIST SP 800-53 security controls and gather evidence to support conclusions.
• Knowledge of operating systems, network and application security to aid implementation of information security and assurance principle.
• Knowledge of SPLUNK software and tools.
• Active Top-Secret clearance and the ability to successfully pass a polygraph and obtain SCI accesses.

⭐ Desirable Experience

• Deep understanding of AWS and Azure cloud platforms, including cloud security and resource management.
• Understanding of AI/LLM technology and use cases (copilot, chatGPT, claude etc).
• Security related certification such as CompTIA Security+, CompTIA Advanced Security Practitioner (CASP+), Cisco Certified Cybersecurity Professional (CCCP).

🎁 Benefits

• Generous cost sharing for medical insurance for the employee and dependents.
• 100% company paid dental insurance for employees and dependents.
• 100% company paid long-term and short-term disability insurance.
• 100% company paid vision insurance for employees and dependents.
• 401k plan with generous match and 100% immediate vesting.
• Competitive Pay.
• Generous paid leave and holiday package.
• Tuition and training reimbursement.
• Life and AD&D Insurance.

🛂 Visa & Eligibility

This position is onsite in Huntsville, AL and requires an active Top-Secret clearance and the ability to successfully pass a polygraph and obtain SCI accesses.