IT Security Spec Prin

BAE Systems•Vicksburg, MS

2d•Onsite

About The Position

BAE Systems is looking for a leader in the exciting and growing field of High Performance Computing (HPC). We are searching for a Senior Info Assurance/Security Specialist to join our team supporting the Department of Defense (DoD) High Performance Computing Modernization Program (DoD HPCMP) located at the Engineering Research and Development Center (ERDC) in Vicksburg MS. The successful candidate will support the DSRC Information System Security Manager as the Senior local DSRC Information Systems Security Officer (ISSO) responsible for the delivery, management and continuous process improvement of operational security information systems by providing Information Security (INFOSEC) and Information Assurance (IA) engineering and analysis.

Requirements

IAT Level II certification or higher
Prior RMF experience
Ability to conduct independent analysis using governance and instruction to identify solutions and ways forward
Experience with Nessus, SCAP Compliance Checker, STIGs, hardening systems and applying IA controls
Experience using eMASS, POA&Ms, HBSS, Nessus, Tanium and ACAS
Bachelor’s degree with 6 years of relevant experience. An equivalent combination of experience/education will be considered
Experience working on DoD programs in a senior IA security role
Forescout experience in a DOD Environment
Organizational skills to prioritize work in a dynamic work environment and persistence to follow-through on tasks in the face of obstacles
Ability to work as part of a multi-faceted team, and leadership skills to guide and mentor the work of less experienced personnel
Familiarity with DoD system security accreditation processes and tools
Windows system Administration background

Responsibilities

Implementation and management of the Risk Management Framework (RMF).
Develop, review and update Approval to Operate (ATO) packages using eMASS.
Establish procedures & processes to ensure tracking and mitigation of risks.
Perform analysis to validate established security requirements and recommend additional security requirements and safeguards.
Ensuring systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan.
Provide oversight and guidance of patching and validation of security related updates including IAVAs, IAVBs and TAs.
Ensuring that users have the requisite security training, clearances, authorization and need-to-know and are aware of their security responsibilities before granting privileged access to the IS.
Ensuring vulnerability scanning, resolution and management is tracked to completion or mitigation.
Promoting awareness of security issues among management and team.
Developing and implementing training to ensure the systems, network and data users are aware of, understand, and adhere to security policies and procedures.
Monitoring and reporting the training status and requirements to support the DSRC mission.
Developing and presenting technical briefings, reports, articles, and presentations to the DSRC user community and HPC security community.
Representing the DSRC at meetings on technical matters relating to IA, networks, and use of advanced computational systems.
Performs security assessments of systems and technology to determine deviation from acceptable configurations, policy or procedures using HBSS, ACAS, SCAP, IAVMs, DISA STIGs.

Benefits

health, dental, and vision insurance
health savings accounts
a 401(k) savings plan
disability coverage
life and accident insurance
employee assistance program
legal plan
discounts on things like home, auto, and pet insurance
paid time off
paid holidays
paid parental leave
military leave
bereavement leave
any applicable federal and state sick leave
company recognition program to receive monetary or non-monetary recognition awards