Security Engineer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

C2H Virginia, Arlington, VA, US

30+ days ago Requisition

This position requires U.S. citizenship and an active U.S. DoD clearance.

Candidates who are not U.S. citizens are not eligible for this role.

Imagine One Technology & Management, Ltd. is seeking two (2) Security Engineers.

This position is contingent upon award of the associated work and will be performed in Dahlgren, Virginia.

The Security Engineers will be expected to:

• Author DoD Cybersecurity Assessment and Authorization artifacts.
• Document a system from a Cybersecurity perspective using Microsoft Office including MS Word, MS Excel and MS Visio and other appropriate tools.
• Derive, document and/or identify system CONOPS for Mission Assurance Categorization per DoDI 8500.2.
• Research and recommend logical and physical solutions that prevent, detect and correct the system to be certified and accredited.
• Apply DISA Security Technical Implementation Guides (STIGs) and NSA recommendations.
• Identify disagreements between as built specifications, security requirements and DoD security policies and recommend approaches to bring the system into compliance.
• Author and revise system requirements and specifications to meet DoD security policies.
• Perform vulnerability tests as Red Team and Blue Team using manual techniques, Assured Compliance Assessment Solution (ACAS) and other similar and appropriate IA and security tools.
• Plan, execute and document risk assessments against known vulnerabilities based upon security approaches and known hacker techniques and exploits.
• Identify and perform security analysis of connectivity relationships between the subject US Naval warfare system and the equipment to which it interfaces, both physically and virtually.
• Lead and perform as ISSO to be focal point for all security matters related to specific sets of information systems.
• Define an Information Assurance Vulnerability Management (IAVM) Plan. Plan, execute and document results of security tests.
• Assist with developing cybersecurity requirements, policy standards, best practices, guidance and procedures for combat systems.
• Conduct cybersecurity related research, analysis and coordination activities in support of DOD cyber assurance and policy efforts at multiple classification levels.
• Participate in working groups to develop cybersecurity strategies to meet emerging threats.
• Develop or use MBSE models to perform cybersecurity analysis.
• Assist with:
• analysis of cybersecurity, intelligence and information technology policy gaps for combat systems.
• cybersecurity system engineering design, analysis and documentation of combat systems.
• developing cybersecurity risk assessment analysis and risk mitigation plans for combat systems.
• developing documentation of cybersecurity requirements, gap analysis, threat analysis, system engineering, risk assessment and mitigation for combat systems.

• Two (2) years program specific security engineering experience working with Navy afloat/tactical combat systems or five (5) years general security engineering experience.
• Two (2) of the five (5) years of engineering experience on Combat Weapons Systems experience in Aegis, SSDS, Zumwalt, or other Navy afloat tactical combat systems.
• Understanding of computer security, military system specifications, DoD Cybersecurity policies for both Land Based and afloat/tactical systems, and the ability to communicate clearly and succinctly in written and oral presentations.

• Certified as IAT Level II or Level III per DoD 8570.01, or successor

• Active DoD Top Secret security clearance
• One (1) engineer will require a TS/SCI clearance

Imagine One Technology & Management, Ltd., offers a full package of benefits and competitive salary, excellent group medical, vision, and dental programs. 401K savings plan; $4K annual tuition reimbursement ($5K if pursuing master's degree); employee training, development, and education programs; profit sharing; advancement opportunities; and much more!

ISO 9001:2015, ISO 20000-1:2018, ISO 27001:2013
CMMI Development and Services - Maturity Level 3
An Employee-Owned Business