Information Assurance Engineer

Responsibilities

• Establishes and satisfies complex system-wide information security requirements based upon the analysis of user, policy, regulatory, and resource demands
• Supports customers at the highest levels in the development and implementation of doctrine and policies
• Applies expertise to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures
• Examples could include command and control-related network
• Provides technical support in investigating and minimizing real or potential damage resulting from security incidents
• Research, analyze, integrate, and distribute IS security tools and associated documentation, subject to government review and approval
• Develops and proposes security procedures for systems and software within area of expertise to ensure consistent security policy implementation for review and approval by the Government

Requirements

• 5+ years of experience in the field or in a related area
• BA/BS degree or High School Diploma and 6 years of additional relevant experience, or, Associate's Degree and 4 years of additional relevant experience may be substituted in lieu of Bachelor's degree
• Proven foundation in computer systems, networks, and security principles is essential
• Ability to deliver technical information clearly and concisely to both technical and non-technical audiences
• Experience analyzing security risks and vulnerabilities

Qualifications

• Masters Degree
• Experience utilizing assessment tools (e.g., ACAS, SCAP, HBSS) and RMF process tools (e.g., MCCAST, eMASS, eArcher, VRAM and DITPR-DON/DADMS)
• CISSP, SEC+ certifications
• Cybersecurity Workforce (CSWF) training with current baseline certifications such as: CompTia, Sec+, CISSP, or equivalent

Physical Requirements

• The person in this position must be able to remain in a stationary position 50% of the time.
• Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.