INFOSEC Specialist​/Cybersecurity; SSO

Facility/Facilities:
Atlantic City, NJ | Washington DC

Veracity Engineering is an industry leader in aviation engineering and management consulting. We apply proven principles and innovative approaches to solve tomorrow’s problems today. Since 2001, Veracity’s staff of experienced, passionate and creative professionals has provided our government and commercial clients with innovative solutions to modernize air traffic systems and advance global initiatives in safety, efficiency, and capacity.

Veracity Engineering is an industry leader in aviation engineering and management consulting. We apply proven principles and innovative approaches to solve tomorrow’s problems today. Since 2001, Veracity’s staff of experienced, passionate and creative professionals has provided our government and commercial clients with innovative solutions to modernize air traffic systems and advance global initiatives in safety, efficiency, and capacity.

Veracity Engineering is an industry leader in aviation engineering and management consulting. We apply proven principles and innovative approaches to solve tomorrow’s problems today. Since 2001, Veracity’s staff of experienced, passionate and creative professionals has provided our government and commercial clients with innovative solutions to modernize air traffic systems and advance global initiatives in safety, efficiency, and capacity.

Veracity Engineering has an exciting opportunity for an INFOSEC Specialist/Cybersecurity (SSO) with FAA in Washington, DC or at the WJHTC, Atlantic City NJ. This position is responsible for support The Federal Aviation Administration (FAA) NAS Security and Enterprise Operations (NASEO) (AJW-B) to minimize the impact of cyber security events or incidents in support of availability and restoration requirements for ATO systems and services.

The System Security Officer (SSO) provides comprehensive cybersecurity support for ATO-owned systems throughout their entire lifecycle, ensuring compliance with federal security standards, Risk Management Framework (RMF) requirements, and maintaining continuous authorization for both Operational (OPS) and Facilities & Equipment (F&E) systems within the National Airspace System (NAS). The FAA runs a multi-faceted cybersecurity program to protect the NAS in accordance with the Federal Information Security Management Act (FISMA).

Essential Functions:

• Establish and maintain coordination procedures with ATO system Program Offices (PO) to ensure awareness of all proposed system changes
• Participate actively in system configuration management processes, including Configuration Control Boards (CCB)
• Conduct security impact assessments for system configuration changes and identify applicable enterprise security services
• Integrate system changes into the security Authorization process and ensure continuity of authorization
• Review system security acquisition documentation, including security documents required by the Acquisition Management System (AMS) process
• Ensure appropriate security requirements are incorporated into applicable system contractual documents and support integration of enterprise security services
• Coordinate initial security Authorization activities and Information Security Continuous Monitoring (ISCM) activities required to maintain Ongoing Authorization
• Review system security authorization documentation to ensure completeness, accuracy, and compliance with NIST RMF and FAA cybersecurity requirements
• Maintain current system security Authorization information in the Security Management Assessment and Reporting Tool (SMART) and Cybersecurity Assessment Management (CSAM) systems

• Create, track, update, validate, and close system…