Information Assurance Engineer

BAE Systems•Washington, DC

5d•$118,095 - $200,762•Onsite

About The Position

BAE Systems is seeking an Information Assurance / Cybersecurity Analyst to support our work as a prime contractor on a high-profile U.S. Navy weapon system. Accuracy, integrity, subject matter expertise, and the ability to work well independently and with others are important traits we expect the successful candidate to possess and demonstrate. This position is full-time on-site at Washington Navy Yard. This position is responsible for providing Information Assurance, Cybersecurity, and Information Management to the Navy’s Strategic Systems Program Command Information Officer (CIO). As an onsite Information Assurance / Cybersecurity Analyst, you will assist in conducting internal audits of enterprise IT networks, systems, applications, and security tools to ensure they adhere to Navy and DoD security policies and procedures (e.g., STIGs, CTOs, IAVMs, FRAGOs, NTDs, etc.) and applicable frameworks and regulations (e.g., NIST,FISMA, etc.).

Requirements

Full-time on-site at Washington Navy Yard
Bachelor's degree in Cyber Security, Information Systems, Computer Science, Mathematics or related field with at least 10 years of professional work-related experience; or 12 years of related professional work experience in lieu of a degree
An IAT Level III and IAM Level II certification as specified in the DoD 8140.
Or, have a SECNAV 5239 qualifying degree and obtain an IAT Level III and/or IAM II certificate as specified in the DoD 8140.
Ability to obtain and maintain Common Access Card (CAC), badge access to the customer’s
Hands on working knowledge of Risk Management Framework.
Experience preparing and reviewing RMF packages.
Experience with information security configuration guides or DISA STIGs.
At least three (3) years-experience supporting and/or maintaining information security technologies.
Experience developing policies, procedures, and technical training materials.
Ability managing client relationships, including determining client needs/requirements, managing client expectations, and demonstrating commitment to delivering quality results.
Proficiency discerning the protection needs (i.e., security controls) of information systems and networks
Proficiency evaluating test plans for applicability and completeness
Proficiency assessing security controls based on cybersecurity principles and tenets. (e.g., CNSSI No. 1253, NISTSP 800-53)
Proficiency performing impact/risk assessments
Proficiency interpreting vulnerability scanner results to identify vulnerabilities.
Knowledge of cyber defense and vulnerability assessment tools and their capabilities
Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
Understanding of security technologies including vulnerability scanning (ACAS), firewalls, HBSS and data protection/encryption systems. OS/CE certification
Understanding of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
Understanding of capabilities and applications of network equipment including routers, switches, bridges, servers, transmission media, and related hardware.
Understanding of business continuity and disaster recovery continuity of operations plans

Nice To Haves

Bachelor's degree in Cyber Security, Information Systems, Computer Science, Mathematics or related field with at least 6 years of professional work-related experience

Responsibilities

Review DoD, DON cyber security alerts, notices, IAVMs, etc.
Conduct risk assessments and discuss mitigation strategies when needed
Review security and data/logs to respond to security incidents on SSP Enterprise systems
Support the IAM/ISSM in developing Cybersecurity standards and policies
Maintain the SSP Enterprise systems Assessment and Authorization (A&A) packages; topologies; ports, protocol, and services lists; contingency plans, disaster recovery procedures, incident response plans, and POA&Ms
As a subject matter expert, you will provide technical guidance to the IAM/ISSM, CIO, Cybersecurity Workgroup (CSWG), Program Managers (PMs), Program Management Officers (PMOs), FBM Partners, etc. on cybersecurity matters and initiatives, including researching new technologies to counter evolving threats.