Security Engineer III
About The Position
The Security Engineer III provides technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation. Responsible for designing and implementing solutions for protecting the confidentiality, integrity and availability of sensitive information. Provides technical evaluations of IT systems and assists with making security improvements. Participates in design of information system contingency plans that maintain appropriate levels of protection and meet time requirements for minimizing operations impact to customer organization. Conducts security product evaluations, and recommends products, technologies and upgrades to improve the organization’s security posture. Understands Information Security Continuous Monitoring (ISCM) concepts and the employ of security automation and risk dashboarding tools and processes to more quickly identify and respond to risk and support more efficient Assessment & Authorization processes such as ongoing authorization. Conducts testing and audit log reviews to evaluate the effectiveness of current security measures.
Requirements
- Bachelor’s Degree or equivalent experience
- IAT I, IAT II, IAM I, IAM II.
- 7+ years’ experience in security engineering
- Must be a US Citizen with a DoD Secret, or higher, clearance determination.
Nice To Haves
- Experience using the DOD Enterprise Mission Assurance Support Service (eMASS) system
Responsibilities
- Develop and/or review system authorization documentation in accordance with DoD implementation of the Risk Management Framework (RMF)
- Participate in TIMs on a wide range of PMO security engineering meetings
- Participate in Acquisition program Engineering Milestone Reviews
- Coordinate with development Contractor security/system engineers and USTRANSCOM/DISA Security Office to resolve program security issues
- Conduct Technical Reviews of development Contractor produced security deliverables
- Perform security activities to maintain authorization of the PMO programs
- Provide support to ensure PMO system(s) are designed, developed, and deployed in accordance with applicable Executive Orders, Federal Policy, DOD regulations, USTRANSCOM requirements, and commercial best practice
- Perform vulnerability scans using ACAS, Nessus, and Fortify SCA, analyze outputs to identify vulnerabilities, and recommend mitigation and remediation actions
- Implement DISA STIGS and verify application
- Write and track POA&Ms
- Conduct and evaluate security testing activities including security assessments, audits, and penetration testing
- Support operational security activities e.g., firewall implementation, risk mitigation, host security, encryption, intrusion detection, Virtual Private Network (VPN) implementations, and viral detections
- Perform security lockdown and/or hardening of servers and network devices
- Coordinate overall security strategy with multiple agencies, Authorizing Official (AO) representatives
- Coordinate with developers, vendors, and other government organizations/agencies to assess security engineering issues
- Recommend changes to network and security architecture to improve security posture and meet operational performance requirements
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
