System Cybersecurity - Senior

Applied Research Solutions•Bedford, MA

3d•Hybrid

About The Position

Applied Research Solutions is seeking a Senior System Cybersecurity Engineer to support HNA (Aerial and Tactical Networks) at Hanscom AFB in a hybrid role. The position supports cybersecurity for assigned systems and applications, including Information System Security Engineer (ISSE), Information System Security Manager (ISSM), and Information System Security Officer (ISSO) duties under the cited Air Force and Department of Defense policies. The role also supports system and application authorization and accreditation activities under the Risk Management Framework (RMF). The expected annual salary range is $170,000–$200,000. Salary depends on the role and associated responsibilities, the candidate’s experience and qualifications, including education and training, and key skills. All positions are subject to background investigations; employment is contingent on successfully completing a background investigation, including criminal history and identity checks.

Requirements

Must be a U.S. citizen.
Meet one of the stated experience and education pathways: a BA/BS degree with 15 years of cybersecurity experience and 5 years of DoD experience; an MA/MS degree with 12 years of experience and 5 years in DoD; or 20 years of directly related experience with appropriate certifications, including 8 years in DoD.
Have a DoD 8570.01 MMGT512-compliant certification.
Have experience with the Risk Management Framework (RMF).
Hold an IAM III baseline certification, such as CISSP, CISM, or GSLC.
Have an active Top Secret security clearance.
Successfully complete a background investigation, including criminal history and identity checks.

Responsibilities

Support system and application authorization and accreditation (A&A), including assessing and guiding the quality and completeness of activities, tasks, and artifacts required by DoD and Air Force policies, including the Risk Management Framework (RMF).
Recommend policies and procedures to ensure information systems are reliable and accessible and to prevent and defend against unauthorized access to systems, networks, and data.
Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs.
Promote awareness of security issues among management and ensure sound security principles are reflected in organizational visions and goals.
Conduct systems security evaluations, audits, and reviews.
Recommend systems security contingency plans and disaster recovery procedures.
Recommend and implement programs to ensure systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
Participate in network and systems design to ensure appropriate systems security policies are implemented.
Facilitate the gathering, analysis, and preservation of evidence used in the prosecution of computer crimes.
Assess security events to determine impact and implement corrective actions.
Ensure rigorous application of information security and cybersecurity policies, principles, and practices in delivering IT services.
Perform ISSE duties in an Information Assurance Workforce System Architecture and Engineering (IASAE) position for assigned systems, as outlined in AFI 33-200, AFI 33-210, and AFMAN 33-285.
Perform ISSM duties for assigned systems and applications as outlined in DoDI 8510.01.
Perform ISSO duties for assigned systems and applications as outlined in DoDI 8510.01.
Perform other duties as assigned.