Designated Authority Officer (DAO)

About the role

Synergy ECP is a Service Disabled Veteran-Owned Small Business (SD(VOSB)) founded in July 2007, headquartered in Columbia, MD. The company provides services to defense, intelligence, and health care industries, serving Fortune 100 companies and various US government and military branches.

Responsibilities

• Assist in identifying overall security requirements for the protection of data and ensure implementation of appropriate information security controls.
• Assist in performing and analyzing security planning, assessment, risk analysis, risk management process, security control assessments, and awareness activities for systems and networking operations.
• Provide assistance to ensure IA functions are included in the configuration management process.
• Interact with customers, IT staff, and high-level corporate officers to assist in defining and achieving required IA objectives for the organization.
• Contribute to building security architecture.
• Assist with the integration of legacy systems.
• Contribute to the acquisition/RDT&E environment and building IA into systems deployed to operational environments.
• Prepare security authorization documentation.

Requirements

• Ten years of related work experience; a Bachelor's Degree in Computer Science or IT Engineering is desired and may be substituted for four years of experience (substitution at COR discretion).
• DoD 8570-01-M compliance with Security Authorization Professional or System Security Engineer.
• Previous work experience as one of the following: IT Risk Assessor, System Security Engineer, Information Systems Security Manager, or DAO (substitution at COR discretion).
• Must possess TS/SCI clearance and be a U.S. Citizen.

Skills

• Working knowledge of system security design process, defense-in-depth/breadth, engineering life cycle, information domains, cross-domain solutions, controlled interfaces, identification, authentication and authorization, system integration, ICD 503 (formerly NISCAP), risk management, intrusion detection, contingency planning, incident handling, configuration control, change management, auditing, security authorization process, principles of IA (confidentiality, integrity, non-repudiation, availability, access control), and security testing.
• IAM, Level II certification.
• CISSP (or Associate) certification.