Information Assurance/Security Engineer Manager

Peraton•,

1d•$104,000 - $166,000•Remote

About The Position

Peraton is seeking an Information Assurance/Security Engineer Manager to support the Department of Homeland Security (DHS) and Transportation Security Administration (TSA). The role applies and implements applicable federal laws, DHS and TSA directives, policies, standards, and industry best practices for incident response, cybersecurity support, and related functions, including FISMA, FedRAMP, ISO 27001, and NIST RMF. The work supports secure data control, handling, protection, mitigation, and incident response. The position is 100% remote and supports the Information Assurance & Cyber Security Division (IAD), including ICAM, incident response and cybersecurity, and risk management and compliance services. The manager provides technical and programmatic information assurance services to internal and external customers, manages complex task-order operations, and serves as an information assurance and cybersecurity subject matter expert. Responsibilities include coordinating with system owners, ISSOs, TSA offices, and stakeholders; monitoring cybersecurity performance; managing infrastructure security risks, vulnerabilities, and compliance; conducting assessments and audits; and developing recommendations, documentation, and strategies to address security and privacy requirements.

Requirements

High school diploma or equivalent and 10 years of experience.
U.S. citizenship.
Ability to obtain and maintain a DHS Entrance on Duty (EOD) clearance.
Seven years of project management or equivalent specialized experience using project management tools and techniques.
Experience managing IT enterprise security or cybersecurity teams.
Experience as an Information Assurance Manager.
Experience in government contact center operations management.
Ability to identify and communicate program risks and recommend mitigation.
ITIL 4 certification no later than Assumption of Responsibility (AOR).
A relevant security certification, such as CISSP or CISM, from an accredited organization.

Nice To Haves

BA/BS degree.
DHS TSA leadership experience.
Strong writing and communication skills.
Strong business acumen and problem-solving capabilities.
Strong written and verbal communication skills.

Responsibilities

Organize, direct, and manage task-order operational support functions involving multiple complex and interrelated project tasks for the Information Assurance & Cyber Security Division.
Support ICAM Support Services, Incident Response & Cybersecurity Support Services, and Risk Management & Compliance Support Services.
Serve as an information assurance and cybersecurity subject matter expert to resolve day-to-day issues.
Support, communicate, and coordinate with other divisions, System Owners, ISSOs, TSA offices, and authorized stakeholders responsible for physical, property, facilities, and intelligence functions.
Monitor and report on the performance of Incident Response & Cybersecurity Support activities.
Use existing tools, platforms, processes, and procedures, and identify and share improvement opportunities to keep incident response and cybersecurity support current with evolving insider and external threats.
Proactively manage infrastructure system security risks, vulnerabilities, and compliance with security configurations, guidance, and policies.
Perform vulnerability management, including scanning and patching, and support DHS ISVM compliance, remediation, and reporting.
Document, deliver, and report outstanding issues in the Vulnerability Management Remediation POA&M Schedule Compliance Report.
Provide technical and programmatic information assurance services for network and information security systems.
Prepare customer-derived documentation using accepted guidelines such as the Risk Management Framework (RMF).
Provide assessment and authorization support, develop security and contingency plans, and conduct complex risk and vulnerability assessments.
Analyze policies and procedures against federal laws and regulations and recommend ways to close gaps.
Develop tests and integrate computer and network security tools; secure system configurations; install security tools; scan systems for compliance; report results; and evaluate products and aspects of system administration.
Conduct security program audits and develop solutions to reduce identified risks.
Develop strategies to comply with privacy, risk management, and e-authentication requirements.
Support the development and implementation of security architectures to meet new and evolving security requirements.