Designs and implements information assurance and security engineering systems with requirements of business continuity, operations security, cryptography, forensics, regulatory compliance, internal counter-espionage (insider threat detection and mitigation), physical security analysis (including facilities analysis, and security management). Assesses and mitigates system security threats and risks throughout the program life cycle. Validates system security requirements definition and analysis. Establishes system security designs. Implements security designs in hardware, software, data, and procedures. Verifies security requirements; performs system certification and accreditation planning and testing and liaison activities. Supports secure systems operations and maintenance.

• Participates with the client in the strategic design process to translate security and business requirements into technical designs.
• Configures and validates secure systems and tests security products and systems to detect security weakness; performs network scanning and vulnerability analysis.
• Ensures that the appropriate security features and safeguards have been implemented on all information systems as required by DoD/IC policy and directives, and industry best practices.
• Performs defense device system installation, configuration maintenance, account maintenance, signature maintenance, patch management, and troubleshooting of all implemented, maintained, and deployed systems.

• Provides security certification test and evaluation of assets, vulnerability management and response, security assessments, customer support and provides guidance on security issues.

• Establishes a security-oriented methodology to inspect and test new and existing technologies.
• Utilizes risk management framework (RMF) knowledge to document a consistent set of criteria for security requirements for new and existing technologies.
• Incorporates supply chain risk management (SCRM) best practices to advocate for security on engineering and plans teams.
• Assesses applicability of available STIGs, vendor best practices and/or other related security benchmarks and collaborates with other security teams on implementation strategies.
• Drafts inputs and supporting documentation for security requirements, change, and configuration management where applicable.
• Automates all security requirement criteria and inspection/test methodologies into security tools where feasible.
• Provides and interprets outputs of the engineering and plans processes with other members of the security team.
• Works with the technical writer to create security-focused portions of technical design guides, security impact analyses, and other artifacts as required.
• Provides subject matter expert level support to internal cybersecurity teams to ensure all RMF, Authorization to Operate (ATO), and Continuous Monitoring artifacts and documents are submitted and updated appropriately.

High School with 9+ years (or commensurate experience)

Clearance Required: TS/SCI, * CISSP Or Equivalent

• Expertise in security engineering principles
• Experience working in the intelligence community
• Understanding of common security tools such as ACAS, STIGViewer, Xacta/eMASS
• Understanding of Risk Management Framework
• Experience with security automation tools
• Experience using Common Criteria and NIAP

Preferred Skills and Experience

• E xperience with Zero Trust implementation
• Knowledge of Service Now
• Excellent written/verbal skills
• Possess soft skills to lead, communicate, focus on details, priortization, decision-making, presentation and a strong analytical and problem solving skill

dl #nss #ar #tmk #tlm #jp #mav

USD $125,000.00 - USD $135,000.00 /Yr.