About the position
Everyone is trying to 'harness the cloud,' but not everyone knows how to secure it. As a security engineer, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. What if you could use your cloud security skills to improve mission critical applications for the Intelligence Community (IC)? We need you to help us develop cloud-based security architectures for some of the IC's most critical systems. As a security engineer on our team, you'll evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization's Information Assurance (IA) and security requirements. You'll assist in defining an organizations' state and risk thresholds and analyze actual state information to assess compliance. You'll work with leaders to advise on codifying strategic objectives into doctrine and procedures that can help meet defined objectives. You'll assist with evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed. You'll recommend tools and capabilities based on your research of the environment and knowledge of various on-premises, cloud-based, and hybrid resources to address Risk Management Framework (RMF) security requirements. Your technical experience will be vital as you work with IC clients to ensure standards are met with IA and security requirements. This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer's environment while collaborating with tomorrow's cloud security experts.
Responsibilities
- Evaluate and support the documentation, validation, assessment, and accreditation processes for IT systems.
- Assist in defining organizations' state and risk thresholds and analyze actual state information for compliance.
- Advise leaders on codifying strategic objectives into doctrine and procedures.
- Assist with evaluation of computer applications and software for adherence to software assurance best practices.
- Recommend tools and capabilities based on research of the environment and knowledge of various resources to address RMF security requirements.
Requirements
- Experience developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans.
- Experience with security architecture evaluations, guidance development, and troubleshooting.
- Experience with the RMF.
- Experience working in an Agile development environment using the JIRA tracking tool.
- TS/SCI clearance with a polygraph.
- HS diploma or GED.
- Ability to obtain a Security+ CE, SSCP, CCNA-Security, or GSEC Certification within 6 months of hire.
Nice-to-haves
- Experience with the software development life cycle (SDLC).
- Experience with cloud technologies.
- Possession of excellent team leadership, development, and client relationship skills.
- Possession of excellent interpersonal skills to successfully interact with clients, engineers, and managers.
- Possession of excellent verbal and written communication skills.
- Security+ CE, SSCP, CCNA-Security, or GSEC Certification.
Benefits
- Health, life, and disability insurance.
- Financial and retirement benefits.
- Paid leave.
- Professional development and tuition assistance.
- Work-life programs and dependent care.
- Recognition awards program for exceptional performance.
