Information Assurance Engineer

Overview

The Digital Modernization Sector has a career opportunity for an Information Assurance Engineer supporting the Global Solutions Management – Operations II (GSM-O II) contract at DISA. This contract includes the Operations, Sustainment, Maintenance, Repair, and Defense of the Defense Information System Network (DISN) within the DOD Information Network (DODIN) in support of the Defense Information Systems Agency (DISA). It also includes support to other key tasks for DISA, including the transformation of DISA’s operational mission through innovation, and support to DISA’s mission partners.

Candidate must be able to spend the majority of their time at the customer site at Fort Meade, MD, although light telework is allowed. Minimum Secret clearance and Security+ are required upon start.

Responsibilities

• Serve as the System Information System Security Officer (ISSO) for various customer systems as an IA Subject Matter Expert (SME) ensuring IA is built into systems deployed to operational environments.
• Develops Project Management Plan to attain and maintain ATOs.
• Perform ISSO responsibilities, including acting as a point of contact and subject matter expert for all cybersecurity related aspects to the assigned information systems, ensuring systems are maintained per security policies and procedures and maintaining compliance and ongoing reporting to management.
• Collaborate with program information assurance staff, program management, and local engineers to ensure an appropriate security posture and Authorization to Operate (ATO) accreditation conditions and requirements are maintained.
• Provide security engineering review of proposed changes or additions to the IS (including hardware, software, or connectivity), and advise the Information System Security Manager (ISSM) of the security relevance.
• Candidate will conduct regular briefings with the customer on cybersecurity status, including preparing briefing materials.
• Initiate the authorization or re-authorization efforts and process for new or expiring systems and coordinate, schedule, and attend required meetings.
• Conduct ongoing security reviews and tests of systems to verify security features and controls are functional and effective. Take corrective action to resolve identified vulnerabilities and ensure systems are operated, maintained, and disposed of in accordance with established policies and procedures.
• Assist with the implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code and other components.
• Review ACAS and container scans for each system and work with infrastructure leads to bring findings into remediation.
• Determine applicability of Information Assurance Vulnerability Alerts to assets.
• Performs and / or reviews technical security assessments of computing environments to identify points of vulnerability, non- compliance with established Information Assurance (IA) standards and regulations and recommend mitigation strategies.
• Develop and maintain assessment and authorization documentation (Body of Evidence) for management and continuous monitoring of information systems, gather signatures, and submit to Enterprise Mission Assurance Support Service (eMASS).
• The individual must satisfy both preparatory and sustaining DoD standard training and certification requirements as a condition of privileged access to any DoD information systems.

Basic Qualifications

Preferred Qualifications

#J-18808-Ljbffr