Information Assurance/Security Engineer Manager

Peraton•,

4d•$104,000 - $166,000•Remote

About The Position

Peraton is seeking an Information Assurance/Security Engineer Manager to support the Department of Homeland Security (DHS) and Transportation Security Administration (TSA). The role provides expertise in applying and implementing applicable federal laws, DHS and TSA directives, policies, standards, and industry best practices for incident response, cybersecurity support, and related functions. Relevant frameworks and standards include FISMA, FedRAMP, ISO 27001, and NIST RMF. The position is 100% remote. The manager organizes, directs, and manages task order operations involving multiple complex, interrelated project tasks in support of the Information Assurance and Cyber Security Division. The role supports ICAM, incident response and cybersecurity, and risk management and compliance services, while coordinating with system owners, ISSOs, TSA offices, and other authorized stakeholders. The position also provides technical and programmatic information assurance services, including security and contingency planning, assessment and authorization support, risk and vulnerability assessments, vulnerability management, compliance reporting, security audits, and recommendations for addressing gaps in policies and procedures. The manager helps develop and implement security architectures and strategies that meet evolving security, privacy, risk management, and e-authentication requirements.

Requirements

High school diploma or equivalent and 10 years of experience.
U.S. citizenship.
Ability to obtain and maintain a DHS Entrance on Duty (EOD) clearance.
Seven years of project management or equivalent specialized experience using project management tools and techniques.
Experience managing IT enterprise security or cybersecurity teams.
Experience as an Information Assurance Manager.
Experience in government contact center operations management.
ITIL 4 certification no later than Assumption of Responsibility (AOR).
Relevant security certification from an accredited organization, such as CISSP or CISM.

Nice To Haves

BA/BS degree.
DHS TSA leadership experience.
Strong writing and communication skills.
Strong business acumen and problem-solving capabilities.
Strong written and verbal communication skills.

Responsibilities

Organize, direct, and manage task order operations involving multiple complex, interrelated project tasks in support of the Information Assurance and Cyber Security Division.
Support ICAM services, incident response and cybersecurity support services, and risk management and compliance support services.
Serve as an information assurance and cybersecurity subject matter expert to resolve day-to-day issues.
Coordinate with other divisions, system owners, ISSOs, TSA offices, and authorized stakeholders responsible for physical, property, facilities, and intelligence functions.
Monitor and report on the performance of incident response and cybersecurity support activities.
Use existing tools, platforms, processes, and procedures, and identify and share improvement areas to address evolving insider and external threats.
Proactively manage infrastructure system security risks, vulnerabilities, and compliance with security configurations, guidance, and policies.
Perform vulnerability management, including scanning and patching, and support DHS ISVM compliance, remediation, and reporting.
Document, deliver, and report outstanding issues in the Vulnerability Management Remediation POA&M Schedule Compliance Report.
Provide technical and programmatic information assurance services to internal and external customers in support of network and information security systems.
Prepare documentation based on information obtained from customers using accepted guidelines such as the Risk Management Framework.
Provide assessment and authorization support in developing security and contingency plans, and conduct complex risk and vulnerability assessments.
Analyze policies and procedures against federal laws and regulations and recommend ways to close gaps.
Develop tests and integrate computer and network security tools; secure system configurations; install security tools; scan systems for compliance; report results; and evaluate products and system administration practices.
Conduct security program audits and develop solutions to reduce identified risks.
Develop strategies to comply with privacy, risk management, and e-authentication requirements.
Support development and implementation of security architectures that meet new and evolving security requirements.
Identify and communicate program risks and recommend mitigation.