Information Assurance Security Engineer

The Information Assurance Security Engineer will provide expert technical support for an intelligence customer, covering information security policy and Certification and Accreditation activities, system assessment, and operational support for NCE network security infrastructure. This onsite role in Springfield, VA includes TS/SCI clearance requirements and ongoing work aligned to security governance and risk management processes.

• Location: Springfield, VA (onsite)
• Additional location: Arnold, MO
• Clearance level: Top Secret/SCI
• Travel required: None
• Public trust: None

Salary range: USD 144, per year

Req#: RQ227759

Requisition type: Regular

This position supports Information Security functions including security policy and ATO support, Certification & Accreditation coordination, and advising and assessing security systems for an intelligence customer. The engineer also supports incident response activities, access approval and audit log review, and Operations & Sustainment for NCE network security infrastructure and related sustainment tasks.

• Provide expert technical services across Information Security, including drafting information security policy drafts.
• Write and review Memorandum of Agreements and coordinate and manage Certification and Accreditation activities.
• Advise and assess system design and architecture, including defining, designing, and evaluating information security systems.
• Support multi-agency information sharing and integration security.
• Maintain affiliations with high-level personnel at multiple agencies and organizations involved in Information Security.
• Perform incident response, system access approval, and audit log review, including Configuration Control Board participation and daily consultations on security issues.
• Report, document, and investigate security incidents and assist with development and implementation of corrective measures.
• Represent the Information System Security Manager to ensure compliance with IS security procedures.
• Support operations, maintenance, and disposal of information system materials in accordance with security directives, policies, practices, and Systems Security Plans.
• Generate and implement required security training to support user security awareness prior to system access.
• Initiate protective and corrective measures when incidents or vulnerabilities are discovered.
• Ensure IA hardware and software compliance with security configuration guides and enforce IA policies and procedures as defined by A&A documentation.
• Perform Operations & Sustainment (O&S) for NCE network security infrastructure, including firewalls, web gateways, mail gateways, IDS, load balancers, performance monitoring tools, and management systems.
• Conduct maintenance and advanced configuration of security equipment to address emerging cyber threats.
• Perform forensic traffic and log analysis to isolate issues or respond to analyst alerts, and respond to escalated troubleshooting requests.
• Maintain and administer network infrastructure standards, documentation, and fault tolerance, and present monitoring and test results as required.
• Support integration testing as required and participate in special projects as required.
• Review Plan of Action and Milestones (POA&Ms), conduct technical decomposition categorization, remediation, and lien resolution.
• Execute remediation processes to address vulnerability findings via ACAS security scans.
• Install, harden, deploy, document, and troubleshoot network perimeter security technologies.
• Use scripting ability on Unix and/or RHEL OS.

• Citizenship: US Citizenship Required
• Clearance: Top Secret/SCI
• Experience: 8+ years of related experience in data security administration (years of experience listing indicates 10+ years, which may vary based on technical training, certification(s), or degree)
• Education: Bachelor’s Degree in Computer Science or a related technical discipline, or equivalent combination of education, professional training, or work experience
• Knowledge and experience with ICD 503
  , and familiarity with Cloud Infrastructure and AWS
  -based solutions.
• Must possess IAM II certification to start in accordance with DOD 8570.1M
  .
• Understand how the customer’s RMF process works and how systems security requirements will be met.
• Certifications:
  CISSP certification or equivalent (CAP, GSLC, CISM)
• System administration experience; network engineering experience; system design and development…