Senior Security Engineer

Chickasaw Nation Industries, Inc.•Reston, VA

7d•$110,000 - $150,000•Onsite

About The Position

The Senior Security Engineer will assist in creating and maintaining IT security policies, architectures, standard operating procedures, and RMF security assessment activities. Activities will include conducting technical security assessments of complex information systems with minimal supervision to include Risk Assessment and Management, Vulnerability Analysis, Contingency Planning/Disaster Recovery, Configuration Management, Security Assessments, and development of Mitigation Plans. Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people.

Requirements

Must be able to obtain and maintain the required customer clearance for access to systems, facilities, equipment and property.
Ability to read and interpret technical drawings, schematics, and system documentation.
Strong understanding of NIST A&A/RMF guidelines and industry best practices.
Bachelor’s Degree and four (4) years of relevant experience or equivalent combination of education/experience.

Nice To Haves

Information Assurance and Security certification preferred.

Responsibilities

Develop security assessment plans, carry out technical security assessments of all selected management, operational and technical security controls, and document the results of the assessment and a concurrent risk assessment in a Security Assessment Report.
Develop POA&M Reports including all identified weaknesses, recommended actions for remediation or mitigation and provide weakness criticality ratings based on the risk assessment results.
Provide multi-discipline security administrative and technical security support to the IA RMF and Continuous Monitoring Programs.
Develop security authorization packages for newly developed systems.
Coordinate all aspects of the Assessment effort with identified points of contact, working with a high degree of independence.
Collaborate with information system owners, security officers, developers, and IT operations personnel to conduct system security categorizations.
Develop initial system security plans and contingency plans aligned with organizational policies.
Provide recommendations to organizational stakeholders for preliminary POA&M remediation and application of security engineering principles.