Senior Information Assurance Engineer

Overview

Position Title:

Information Assurance Engineer III

Work Location:

Austin, TX

Job Summary

Kai Honua, LLC has an immediate opening for an Information Assurance (IA) Engineer to join our rapidly growing team. IA Engineer applies IT security principles, methods, and security products to protect and maintain the availability, integrity, confidentiality, and accountability of information system resources and processed information; plans, implements, and manages a Defense In Depth for the total network and/or enclaves within the network;

identifies and analyzes threats and vulnerabilities to the information systems to maintain protection, accomplish risk analysis, security testing, and certification due to modifications or changes, completes computer security plans, and enforces mandatory access control techniques; manages a network security program, reporting all incidents promptly and providing corrective action to prevent further incidents; implements guidance to ensure the protection of Internet information, reduces the risks associated with automated processing of information and data, and trains all personnel in IT security awareness, as required.

Essential Duties and Responsibilities
: (Not listed in order of importance; other duties may be assigned) and must be able to perform the following with minimal guidance:

• Work with system owners to close IAVMs/ICVMs and open Plan of Action and Milestones (POA&Ms) in a rapid fashion, in accordance with DoD instructions/directives. Review all POA&MS with the Program Manager on at least a quarterly basis and update the POA&Ms accordingly.
• Provide Defense in Depth principles and technology in security engineering designs and implementation
• Analyze existing and future systems, reviewing security architectures, and developing engineering solutions that integrate information security requirements to proactively manage information protection
• Apply security risk assessment methodology to system development, including assessing and auditing network penetration testing, antivirus deployment, risk analysis
• Conduct Computer Incident Response Team (CIRT) activities, including forensic analysis
• Plan, implement, and manage a Defense In Depth for the total network and/or enclaves within the network to include such items as: scanning, remediation, host and network intrusion detection/prevention, firewalls, proxy servers, web cache, virus programs, vulnerability scanning, content filtering, remote dial in protection, Host Based Security Services, Directory Services, and Certification and Accreditation, DoD Instruction 5200.40, accreditation guidance and advice IAW AR 25-2 and IA Best Business Practices (BBPs).
  
  Plan, respond, investigate, and report undisclosed classified incident remediation.
• Assess and mitigate system security threats/risks throughout the program life cycle
• Validate system security requirements definition and analysis and review/approve System Security Plans for enterprise-wide architectures
• Maintain Agency public key infrastructure system Implement security designs in hardware, software, data and procedures
• Provide support for the Department of Defense (DoD) Public Key Infrastructure (PKI) service.
• Responsible for requesting, receiving, installation, and accountability of system (server) PKI certificates and providing technical support for PKI.
• Provide communications security (COMSEC) rekeying support within normal business hours or on-call, as required. Prepare and maintain secure communications devices and crypto keys. Provide Certification and Accreditation, as well as provide Automated Information System Accreditation support
• Provide Security Risk Assessment. Perform risk analysis of resources, controls, vulnerabilities, impact of losing systems’ capabilities and threats to the mission objective; provide analysis to facilitate decisions to implement security countermeasures or mitigate risk; implement countermeasures; periodically review program. Recognize possible threats and review evaluations for compliance and non-compliance.
• Other duties as assigned.

Requirements

Qualifications:

To perform this job successfully, an individual must be able to…