Senior Information Assurance Engineer

Telos•San Antonio, TX

About The Position

The Senior Information Assurance Engineer supports cybersecurity and information assurance activities for systems, software, applications, and DevSecOps projects. The role involves learning and using the Xacta IA Manager Software Suite and eMASS, entering security information and RMF A&A data, and providing day-to-day support for Unclassified, Collateral, SCI, and SAP activities. The engineer conducts system walkthroughs to collect artifacts for initial NIST RMF A&A and continuous monitoring, and plans and performs security control assessments in accordance with client policies and procedures. The role develops and manages RMF projects using DAF and AF IC tools such as eMASS and Xacta. It produces authorization and assessment evidence, including SSPs, RARs, POA&M sections, and vulnerability reports, while meeting local requirements and applicable governance. The engineer gathers FedRAMP artifacts to support DAF and AF IC Authorizing Official risk decisions, performs audits and vulnerability risk assessments, manages hardware and software configurations, investigates cybersecurity incidents, and develops authorization, security-management, and continuous-monitoring documentation. The role also supports cybersecurity education and training, interfaces with customers to resolve problems, and performs other administrative and support functions as needed. The position is based in San Antonio.

Requirements

Current TS clearance with Sensitive Compartmented Information (SCI).
DoD 8140-compliant IT, computer science, or cybersecurity bachelor's degree, or equivalent education, professional training, or work experience (8–10 years).
Three years of experience at the Senior or SME level as an Information System Security Engineer, Information Systems Security Manager, or Information Systems Security Officer; or five years of experience with RMF, NIST, FISMA, and POA&Ms from theoretical, practical, and best-practice perspectives.
Experience with cloud environments and cybersecurity requirements.
Experience using a combination of information assurance and IT-related skills.
Experience in a role within, or implementing, the RMF Assessment and Authorize process.
Experience developing, executing, reviewing, and documenting security control test plans and implementation statements.
Experience investigating and documenting system topology in OV-1 or similar diagrams, including ports, protocols, interfaces, hardware, software, and cryptography.
Experience with security hardening requirements in accordance with DoD and vendor guidance.
Experience in vulnerability analysis and patch remediation.
Knowledge and experience applying security requirements related to applicable control overlays, such as Privacy, Classified, and Cross Domain Solutions.
Strong written and verbal communication skills and the ability to interact with people at all levels.
Professional attention to detail and customer service, along with excellent organizational skills.
Ability to maintain strict attention to detail and deliver high-quality work.
Demonstrated ability to work autonomously.
U.S. citizenship and eligibility to access sensitive information.

Responsibilities

Learn and become familiar with the Xacta IA Manager Software Suite and eMASS tools.
Enter security aspects of systems, software, applications, and DevSecOps projects, along with associated RMF A&A data consistent with RMF ISSM responsibilities.
Provide day-to-day support for Unclassified, Collateral, SCI, and SAP activities.
Conduct walkthroughs of enterprise systems, applications, and DevSecOps projects to collect artifacts for initial NIST RMF A&A and continuous monitoring.
Plan and execute security control assessments in compliance with client policies and procedures.
Use Xacta and eMASS to produce Body of Evidence materials, including SSPs, RARs, POA&M portions, and vulnerability reports.
Develop and manage multiple RMF projects in DAF and AF IC RMF tools such as eMASS or Xacta IA Manager Suite.
Gather FedRAMP artifacts to support DAF and AF IC AO risk decisions.
Perform system auditing, vulnerability risk assessments, hardware/software configuration management, and investigations into cybersecurity violations or incidents.
Develop system documentation for information system authorization, security management, and continuous monitoring.
Assist with cybersecurity education and training for system users on risk mitigation strategies.
Interface with internal and external customers to identify requirements and provide problem resolution.
Perform other administrative and support functions as needed.