Essential Job Responsibilities

• Will create, review and edit authorization documentation for completeness and accuracy in accordance with federal and DoD policy.
• Thoroughly understand and be able to implement DoD RMF system accreditation processes.
• Assess use case and operational risk of integrated open source, and GOTS/COTS software components.
• Will use vulnerability management systems, automated security scanning tools, and system accreditation record systems.
• Must be able to grasp new concepts, facilitate information exchanges for data gathering, and collaborate with diverse audiences.
• Will follow established processes where applicable, and establish and execute defensible processes where none are prescribed.
• Provide security planning, assessment, risk analysis, and risk management support.
• Recommend system-level solutions to resolve security requirements and guide the development team in meeting the security posture requirements.
• Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
• Must apply existing knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments.
• Must be able to interact well with others to complete work.
• Other duties as assigned.

Minimum Qualifications

• Security Clearance - A current TS/SCI level U.S. Government clearance with CI Poly is required; U.S. Citizenship required.
• 9+ years of experience as an ISSE or security-focused software / systems engineer with large multi-tiered programs and Bachelors in related field; OR 7 years relevant experience with Masters in related field; OR High School Diploma or equivalent and 13 years relevant experience.
• Experience implementing DoD system accreditation processes (DIACAP acceptable and RMF preferred).
• A working knowledge of TCP/IP suite of protocols and services, computer architectures, and network topologies is required.
• DoD 8570 compliance with IAT Level II (SSCP, Security+, CCNA-Security, or GSEC certification)
• Experience with DISA STIGs and SRGs, vulnerability management systems, mitigation and compliance processes, and reviewing results from automated security scanning tools.
• The ability to work independently and as part of a team is needed.
• Flexibility is essential to adapt to schedule changes as needed.

Preferred Requirements

• CISSP-ISSEP is highly desired