Security Engineer Jr.

Saliense • Arlington, VA

2d

About The Position

The Security Engineer Junior supports work performed under the contract possessing a core set of knowledge of federal information system security policy, industry best practices, security control assessments, Plan of Action and Milestones (POA&M) management, system authorizations, configuration management, and system analysis. Possesses a solid knowledge of federal information system security policy, industry best practices, security control assessments, Plan of Action and Milestones (POA&M) management, system authorizations, configuration management, and system analysis.

Requirements

• BS/BA in Computer Science, Information Systems, Engineering, Business, Physical Science, or other technology-related discipline.
• A minimum of one (1) year of federal information systems security experience.
• Experience with RMF and applying the NIST Cybersecurity Framework.
• Solid knowledge of federal information system security policy, industry best practices, security control assessments, Plan of Action and Milestones (POA&M) management, system authorizations, configuration management, and system analysis.
• Experience designing and implementing solutions for protecting the confidentiality, integrity, and availability of sensitive information.
• Experience providing technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
• Experience using CSAM.
• Solid understanding and application of NIST Special Publications including SP 800-53, SP 800-137, SP 800-171, and SP 800-37.
• Solid understanding of FISMA audit requirements.
• Solid understanding of IT audit requirements.
• Ability to work with cooperatively and at a technical level with developers, engineers, and managers on system teams.
• Knowledge of computer networking concepts, protocols, and network security methodologies.
• Knowledge of risk management processes and tools (e.g., methods and tools for assessing and mitigating risks).
• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy in a federal environment.
• Knowledge of current and past cybersecurity threats and vulnerabilities.

Responsibilities

• Developing and executing test plans of the OMB Circular A-123 internal control assessments as well as FISMA internal control assessments.
• Determining, gathering, examining, and analyzing artifacts related to FISMA security control assessments and remediation verification.
• Documenting all assessment activities and results in sufficient detail to enable external review of all assessment processes, activities, results, and conclusions.
• Providing security expertise to ensure security controls are implemented and the resulting documentation and artifacts are current.
• Conducting security product evaluations, and recommending products, technologies, and upgrades to improve the customer’s security posture.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level