Information Assurance/Security Engineer

4 нед. назад

СШАOnsite

information assurancesecurity engineeringsecurity testingsecurity controlssystem configurationsecurity reporting

Provides security engineering and information assurance support for government mission applications to maintain Authority to Operate and Connect.

Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At , we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. Description of Task to be Performed: The Information Assurance / Security Engineer will provide security engineering and information assurance support to the Government’s Assessment and Authorization (A&A) process to maintain Authority to Operate (ATO) and Authority to Connect (ATC) for mission applications and services. Designs, develops, monitors and documents security controls, security testing, security reporting, and plan of actions and milestones (POA&Ms) throughout systems and application lifecycles in support of mission systems. Provides security engineering design inputs, security design reviews, and security best practices as part of technical and change requests. Configures and validates secure systems, physical controls, and tests security products and systems to detect security weaknesses. Maintains XACTA security records for supported systems.

Clearance: Top Secret security clearance, CI poly eligible
Education: Bachelor’s Degree in computer science, engineering, or similar technical field (additional 4 years of relevant experience may be substituted for degree)
Certification: Requires 8570 compliance (IAT Level 2) such as CompTIA Security +
Experience:
Ideal candidates have 6 years of hands-on experience and expertise in one or more of the following:
Support for information assurance and/or ATO process for Classified DoD or IC environments.
Experience documenting and assessing security controls in CentOS/RHEL Linux Systems, Cisco Networks, VDI and/or Virtual server hosting environments.
Experience supporting, securing and delivering hardware and software updates and enhancements through security assessment and authorization, and production readiness reviews.
Demonstrated documentation writing for security plans, tests, and reports.
Must demonstrate strong teamwork, communication (both verbal and written), and presentation skills.
Must demonstrate strong initiative to accept new technical challenges in complex security engineering assignments.

Desired Education: Master’s Degree
Desired Certifications:
Certified Information Systems Security Professional (CISSP)
Cisco Certified Network Professional (CCNP) certification(s)
Desired Experience with one or more of the following:
DoD or Intelligence Community (IC) IT and Application service delivery
Full lifecycle A&A process for classified infrastructure and application service delivery
ATO process management through XACTA
Agile software development
supporting NiFi data flows
supporting Apache Tomcat webservices
Cross domain solutions