Sca Darpa Itd

System High Corporation • Arlington, VA

1d

About The Position

The Security Control Assessor (SCA) will fulfill a variety of cybersecurity functions, including System Administrator, Enterprise Oversight, certification and accreditation, SAP and SCI assessment and authorization (A&A), Platform Information Technology (PIT) assessment and authorization, Information Assurance and Technical Security for AIS, Information Technology (IT) Network Administration & Support, and Information System Security Officer support. The SCA will perform IA tasks to ensure the DARPA IA program meets National, DoD, and DARPA IA standards, protecting and defending DARPA information and Information Systems (IS) by ensuring confidentiality, integrity, availability, authentication, and non-repudiation. The Senior Cybersecurity Specialist possesses experience in successfully participating in DoD Special Access Program Joint Certification and Accreditation, Assessment, and Approval events for DoD Joint cyber ranges and/or jointly accredited SAP information systems. The DARPA systems to be protected include systems that process and store information from controlled unclassified (CUI) up to Top Secret, including SAP and SCI caveats/compartments. Duties include, but are not limited to: meeting and participating in Defense Information System Agency (DISA), National Security Agency, and USCBYERCOM Computer Network Defense Program (CNDSP) and CBYERCOM Computer Readiness Inspections (CCRI); experience with network security devices, classified Local Area Networks, Wide Area Networks, public key infrastructure (PKI), virtual machines, and end-point security solutions. The SCA must be thoroughly familiar with, understand, and be able to apply numerous DoD and CNSS policies and directives. Ensure system security requirements are addressed during all phases of DARPA program life cycles. Plan, prepare, and execute inspections, authorization and approval (A&A) events for all classifications of networks, including developing and reviewing Automated Information System Authorization and Approval Packages. Develop, review, endorse, and recommend action for system certification documentation. Conduct quality control of system accreditation packages within 3 business days of receipt. Process authorization and approval or denial documentation within 10 business days of receipt of a complete package. Conduct security control assessments to evaluate the extent to which controls are implemented correctly, operating as intended, and producing the desired outcome. Provide an assessment of the severity of weaknesses or deficiencies and recommend corrective actions. Analyze and make recommendations in support of DARPA accredited network Configuration Control Board cases within 10 calendar days of case validation. Monitor activities of DARPA accredited networks and DARPA DAO Accredited performer networks. Provide advice, assistance, and analysis of threats, vulnerabilities, and risk mitigation and acceptance recommendations. Conduct certification tests to verify functional features and assurances. Work collaboratively with the MSO/Information Technology Directorate (ITD) in the authorization and approval and continuous monitoring of DARPA unclassified and classified networks. Review and recommend changes or amplification of policy, procedures, and strategy development. Evaluate Information Assurance (IA) products and provide written recommendations. Evaluate information technology (IT) vulnerabilities to assess whether additional safeguards are prudent. Develop and maintain a formal, written Information Systems Security Program SOP. Ensure all Information System Security Officers (ISSO), network administrators, and other AIS personnel receive necessary training. Ensure development and implementation of an information security education, training, and awareness program. Maintain a repository for all system certification/accreditation documentation and modifications. Coordinate AIS security inspections, tests, and reviews. Prepare policies and procedures for responding to security incidents and for investigating and reporting security violations and incidents. Ensure proper protection or corrective measures have been taken when an incident or vulnerability has been discovered. Assess changes in a system, its environment, or operational needs that could affect accreditation. Ensure configuration management (CM) for security-relevant AIS software, hardware, and firmware is maintained and documented. Perform system audits and work closely with system administrators to ensure current security measures are sufficient and in compliance. Perform, and conduct training as required, for the execution of secure file transfers/trusted downloads. Provide technical advice and assistance, and perform technical oversight on telecommunications requirements. In coordination with ITD Emergency Management, review and provide AIS security relevant input to DARPA Emergency/Disaster plans and procedures.

Requirements

• Relevant work experience as specified for an Information Assurance Technical (IAT) Level III or Information Assurance Management (IAM) Level II in DoD Manual 8570.1-M.
• Extensive knowledge of RMF (Risk Management Framework).
• Experience assessing and authorizing various PIT systems (of all classification levels) including but not limited to; space systems, manned and unmanned aircraft systems, manned and unmanned underwater vessels, cyber operation platforms, cyber capabilities, directed energy systems, and hand-held battlefield orientation electronic devices.
• Minimum of active Top Secret (TS) clearance.
• TS/SCI strongly desired.
• Subject to a random counter-intelligence scope polygraphs as a condition of access eligibility.
• Bachelor’s degree in Computer Science or Information Systems with at least 12 years of specific, demonstrable, and successful experience fulfilling a Cybersecurity role for a DoD or IC customer on similar size and scale.
• DoD Approved Baseline Certification as a CISSP IAW DoD 8570.1-M.
• Ability to travel to CONUS and/or OCONUS locations.
• Must have active US passport for OCONUS travel requirements.

Nice To Haves

• TS/SCI strongly desired.
• A Master’s degree in Computer Science or Information Systems may substitute for 4 years of relevant experience.

Responsibilities

• Fulfill a variety of cybersecurity functions, to include System Administrator, Enterprise Oversight, certification and accreditation, SAP and SCI assessment and authorization (A&A), Platform Information Technology (PIT) assessment and authorization, Information Assurance and Technical Security for AIS, Information Technology (IT) Network Administration & Support, and Information System Security Officer support.
• Perform IA tasks necessary to ensure that the existing DARPA IA program meets National, DoD, and DARPA IA standards, and continues to protect and defend DARPA information and Information Systems (IS) by ensuring the confidentiality integrity, availability, authentication, and non-repudiation of the systems.
• Possess experience in successfully meeting and participating in Defense Information System Agency (DISA), National Security Agency, and USCBYERCOM Computer Network Defense Program (CNDSP) and CBYERCOM Computer Readiness Inspections (CCRI).
• Experience with network security devices, classified Local Area Networks, Wide Area Networks, public key infrastructure (PKI), virtual machines, and end-point security solutions.
• Ensure system security requirements are addressed during all phases of DARPA program life cycles (concept development, Request for Information (RFI), Request for Proposal (RFP) or BAA, Proposal, Selection, Award, Closeout, Transition, etc.).
• Planning, preparing, and executing inspections, authorization and approval (A&A) events IAW with the respective policies detailed in paragraph 3.12.c. for all classifications of networks; to include the development and review of Automated Information System Authorization and Approval Packages.
• Develop, review, endorse, and recommend action by the authorizing official (AO), delegated authorizing official (DAO), or designated approval authority (DAA) for system certification documentation.
• Conduct quality control of system accreditation packages for completeness of accreditation artifacts within 3 business days of receipt from the technology office security staffs or their cleared defense industry contractors and/or participating government agencies.
• Process authorization and approval or denial documentation to the respective DAPRA AO/DAO/or DAA within 10 business days of receipt of a complete package.
• Conduct security control assessments for the evaluation of security controls to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for an AIS.
• Provide an assessment of the severity of weaknesses or deficiencies discovered in the information system and its environment of operation and recommend corrective actions to address identified vulnerabilities.
• Analyze and make recommendations in support of DARPA accredited network Configuration Control Board cases within 10 calendar days of case validation by the respective network’s Information System owner.
• Monitor activities of DARPA accredited networks and DARPA DAO Accredited performer networks.
• Provide advice, assistance, and analysis of threats and vulnerabilities and risk mitigation and acceptance recommendations, as required.
• Conduct certification tests that include verification that the features and assurances are functional and support accreditation.
• Work collaboratively with the MSO/Information Technology Directorate (ITD) in the authorization and approval and continuous monitoring of DARPA unclassified and classified networks; including but not limited to: DARPA Management Security System (DMSS) – Unclassified, DARPA Public Network (DPN) - Unclassified, DARPA Secret Network (DSN)/Secret Internet Protocol Router Network (SIPRNet) Connection – up to SECRET Collateral, DARPA Joint Worldwide Intelligence Communications System (JWICS) Network (DJN)/JWICS Connections – up to TOP SECRET SCI, DARPA Secure Wide Area Network (DSWAN) – up to SECRET Collateral, Multi-Level Security System (SAVANNAH) – up to TOP SECRET SAP and SCI.
• Review and recommend changes or amplification of policy, procedures, and strategy development.
• Evaluate Information Assurance (IA) products and provide written recommendations as to their risk and usefulness and/or adoption for the DARPA IA mission.
• Evaluate information technology (IT) vulnerabilities to assess whether additional safeguards are prudent and ensure certification is accomplished for each information system.
• Develop and maintain a formal, written Information Systems Security Program SOP.
• Ensure all Information System Security Officers (ISSO), network administrators, and other Automated Information Security (AIS) personnel, to include DARPA performers performing these functions, receive the necessary and required technical and security training to carry out their duties.
• Ensure development and implementation of an information security education, training, and awareness program, to include attending, monitoring, and presenting local AIS security training.
• Maintain a repository for all system certification/accreditation documentation and modifications.
• Coordinate AIS security inspections, tests, and reviews.
• Prepare policies and procedures for responding to security incidents and for investigating and reporting security violations and incidents.
• Ensure proper protection or corrective measures have been taken when an incident or vulnerability has been discovered.
• Assess changes in a system, its environment, or operational needs that could affect the accreditation.
• Ensure configuration management (CM) for security-relevant AIS software, hardware, and firmware is maintained and documented.
• Perform system audits on multiple systems; work closely with system administrators and ensure current security measures are sufficient and in compliance with approved policies and processes.
• Perform, and conduct training as required, for the execution of secure file transfers/trusted downloads between local systems to storage devices, this includes secure down writing of data between systems of different security levels.
• Provide technical advice and assistance, as required, and perform technical oversight on telecommunications requirements for Collateral, SAP, and SCI systems and networks.
• In coordination with ITD Emergency Management, review and provide AIS security relevant input to DARPA Emergency/Disaster plans and procedures.
• Attend meetings (either locally or out-of-area) and create meeting summaries or trip reports.
• Prepare and submit meeting minutes on an as-required basis.
• Prepare/present briefings, incorporating graphics (if appropriate) for/to ITD/ DARPA leaders.
• Prepare various security forms associated with their duties.
• Assist in entry control and perform escort duties for visitors.
• Answer telephones and other modes of administrative communications in the performance of duties.
• Perform self-inspections, identify security discrepancies, and report security incidents.
• Perform, or support, security inspections, identify security discrepancies and prepare reports.
• Perform courier duties within the continental United States (CONUS).
• Perform user-level security administrator and information security responsibilities are required and in compliance with US Codes, Executive Orders, and DoD and DARPA policy.
• Perform objective reviews on all documentation encountered during performance of duties.

Benefits

• System High is a Military friendly employer.
• Opportunity to continue to serve their country in a new and exciting way while enjoying a successful civilian career.
• Equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, veteran status, or any other characteristic protected by law.
• Inclusive culture to encourage each employee to bring their whole self to the mission.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior