Information Assurance Specialist

AnaVation•Bethesda, MD

1d•Onsite

About The Position

The Information Assurance/Security Engineer will provide security engineering and information assurance support to the Government’s Assessment and Authorization (A&A) process to maintain Authority to Operate (ATO) and Authority to Connect (ATC) for mission applications and services. Designs, develops, monitors and documents security controls, security testing, security reporting, and plan of actions and milestones (POA&Ms) throughout systems and application lifecycles in support of mission systems. Provides security engineering design inputs, security design reviews, and security best practices as part of technical and change requests. Configures and validates secure systems, physical controls, and tests security products and systems to detect security weaknesses. Maintains XACTA security records for supported systems.

Requirements

Active TS/SCI Clearance with CI Polygraph
Bachelor’s degree in Network Engineering, Computer Science or related technical field plus 5-7 years of Cyber Security/Operations support
DoD 8140 IAT Level II Certification (CCNA-Security, CySA+, CND, Security+)
Demonstrated experience documenting network schemas and cyber operation tool solutions.
Knowledgeable regarding compliance with: ICD 503, FISMA, OMB, NIST, and DoD (8150.01 March 12, 2014) [Risk Management Framework and Cyber Network Defense…], and other mandated security regulations and standards.
Knowledge and experience with managing and monitoring compliance with Privileged User Access (PUA), Data Transfer Access (DTA), and Removable Media Custodian (RMC) privileges, forms, and signatures.
Support to vulnerability management, patching, information assurance and/or ATO process for Classified DoD or IC environments.
Demonstrated documentation writing for security plans, tests, and reports.
Must demonstrate strong teamwork, communication (both verbal and written), and presentation skills.
Must demonstrate strong initiative to accept new technical challenges in complex security engineering assignments

Nice To Haves

Master’s degree in Network Engineering, Computer Science or related technical field plus 3+ years of Cyber Security/Operations support
Certifications: CySA+
Experience supporting full lifecycle A&A process for classified DoD or IC infrastructure and application service delivery.
Experience leading an ATO process through XACTA tool.
Extensive hands-on experience with Agile software development
Experience working with cross domain solutions
Proven experience providing mechanisms to improve governance and support of IA functions for the customer enterprise.

Responsibilities

Provide security engineering and information assurance support to the Government’s Assessment and Authorization (A&A) process to maintain Authority to Operate (ATO) and Authority to Connect (ATC) for mission applications and services.
Design, develop, monitor and document security controls, security testing, security reporting, and plan of actions and milestones (POA&Ms) throughout systems and application lifecycles in support of mission systems.
Provide security engineering design inputs, security design reviews, and security best practices as part of technical and change requests.
Configure and validate secure systems, physical controls, and test security products and systems to detect security weaknesses.
Maintain XACTA security records for supported systems.