Responsibilities
As an Information Security Engineer, you will work hands on to assess and harden the mission systems to meet DISA compliance. You will work with the team to develop automated STIGing capabilities utilizing a combination of PowerShell, automated checklist scanning tools, and DevSecOps build pipelines enabling the organization to improve our overall security baseline while reducing the manual checks required.
This work includes but is not limited to:
- Perform automated and manual STIG scans
- Develop and remediate POAMs
- Provides technical and programmatic Information Assurance Services to internal and external customers in support of network and information security systems.
- Design, develop and implement security requirements within an organization’s business processes.
- Prepare documentation from information obtained from customer using accepted guidelines such as RMF (Risk Management Framework).
- Provide assessment and authorization (A&A) support in the development of security and contingency plans and conducts complex risk and vulnerability assessments.
- Analyze policies and procedures against Federal laws and regulations and provides recommendations for closing gaps.
- Develop and complete system security plans and contingency plans.
- Recommend system enhancements to improve security deficiencies.
- Secure system configurations and install security tools, scan systems in order to determine compliancy and report results and evaluates products and various aspects of system administration.
- Conduct security program audits and develops solutions to lessen identified risks.
- Develops strategie to comply with privacy, risk management, and e-authentication requirements.
- Provide information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.
- Evaluate, develops and enhances security requirements, policy and tools.
- Provide assistance in computer incident investigations.
- Perform vulnerability assessments including development of risk mitigation strategies.
- Other duties as assigned
Qualification
BS 8-10, MS 6-8, PhD 3-5. In lieu of education, candidate must have 12+ years of relevant experience, active TS/SCI clearance and IAT level II certification or higher (https://public.cyber.mil/cw/cwmp/dod-approved-8570-baseline-certifications/)
Desired Experiences:
- STIG multiple technologies (Windows, AD, VMware, RHEL, CISCO, DNS, Palo Alto, etc.)
- STIG tools (SCAP Compliance Checker, STIGViewer, Evaluate-STIG, Vulnerator)
- ACAS/NESSUS
- McAfee ePO and Army Enterprise System Security (AESS)
- eMASS
- Fortify Source Code Analysis and application security
- Risk Management Framework (Categorization, Controls, Implementation, Assessment, Authorization, Continuous Monitoring)
- PowerShell or other scripting languages
- AWS cloud security
Target Salary Range
$112,000 - $179,000. This represents the typical salary range for this position based on experience and other factors.
For more info.: https://hubs.ly/Q022NX060
