Lead Information Assurance Engineer

Trace Systems•Colorado Springs, CO

5h•$100,000 - $133,000

About The Position

Trace Systems has an immediate opportunity for an Information Assurance Engineer in Colorado Springs, Colorado supporting USNORTHCOM's Deployable Communications Capabilities System (DCCS). In this role, you will have a unique opportunity to manage a comprehensive Information Assurance program supporting our customer’s tactical communications network. Additionally, you will have the opportunity to provide customer based training based at various locations across the United States. Duties and responsibilities may include, but are not limited to: Design, develop, implement and/or integrate IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements. Conduct system scans to access vulnerabilities. Adhere to the concept of Least Privilege Understand and be able to explain concepts found in NIST 800-40, 800-53, 800-171. Function as the primary for SIPRNet access and management. Understand, incorporate, and explain Risk Management Framework (RMF) / Cybersecurity Risk Management Construct (CSRMC). Consult on security matters related to SATCOM operations as it relates to High Availability use cases (e.g. Emergency Response, Environmental Disasters). Understand, explain, and use Adversarial Tactics, Techniques, and Command Knowledge (ATT&K). Assess and mitigate system security threats/risks throughout the program life cycle. Contribute to the security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations. Review certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content. Document the design of the operating environment in accordance with government Information Assurance documentation (DIACAP certification) procedures/formats and assist in other IA documentation as requested. Perform risk analyses of applications/networks. Serve as the Communications Security (COMSEC) Responsible Officer (CRO), responsible for the security, oversight, accountability, and compliance of COMSEC material in accordance with applicable NSA, DoD, contractual and organizational requirements.

Requirements

An active, in-scope US Government issued Secret clearance.
Due to the nature of the work and contract requirements, US Citizenship is required.
3+ years of cybersecurity experience, including but not limited to STIGs, Information Assurance, and COMSEC.
Current DoD 8410 IAT Level III / IAM Level II (SecurityX, CCNP Security, CISA, CISSP, GCED, GCIH, CAP, CISM)
Experience with the DoD and military personnel.
Due to contractual requirements, candidate must successfully pass pre-employment drug screen.
Bachelor of Science Degree in a technical field is required.

Nice To Haves

Experience as a COMSEC Responsible Officer
Experience with Enterprise Mission Assurance Support Service
Experience as an Information Systems Security Officer (ISSO)
Master’s degree in Cybersecurity
Certified Ethical Hacker

Responsibilities

Design, develop, implement and/or integrate IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements.
Conduct system scans to access vulnerabilities.
Adhere to the concept of Least Privilege
Understand and be able to explain concepts found in NIST 800-40, 800-53, 800-171.
Function as the primary for SIPRNet access and management.
Understand, incorporate, and explain Risk Management Framework (RMF) / Cybersecurity Risk Management Construct (CSRMC).
Consult on security matters related to SATCOM operations as it relates to High Availability use cases (e.g. Emergency Response, Environmental Disasters).
Understand, explain, and use Adversarial Tactics, Techniques, and Command Knowledge (ATT&K).
Assess and mitigate system security threats/risks throughout the program life cycle.
Contribute to the security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.
Review certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content.
Document the design of the operating environment in accordance with government Information Assurance documentation (DIACAP certification) procedures/formats and assist in other IA documentation as requested.
Perform risk analyses of applications/networks.
Serve as the Communications Security (COMSEC) Responsible Officer (CRO), responsible for the security, oversight, accountability, and compliance of COMSEC material in accordance with applicable NSA, DoD, contractual and organizational requirements.