National Security System (NSS) Engineer (Springfield)

National Security System (NSS) Engineer

Evolver Federal is seeking a National Security System (NSS) Engineer to support its Federal client in Springfield, VA in analyzing and mitigating risk for a portfolio of National Security Systems. The NSS Engineer will review and analyze system design and security architecture documentation as well as security documentation, including System Security Plans (SSPs) to identify areas of noncompliance with security requirements and security risk, also identifying discrepancies among documentation as it relates to technical implementation.

The successful candidate will have SME-level knowledge of security requirements for National Security Systems (NSS) with strong communication skills to clearly articulate security risk to stakeholders at all layers of the client organization.

Responsibilities

• Draft and maintain Standard Operating Procedures (SOPs) for internal and external processes.
• Analyze cybersecurity data (e.g., continuous monitoring, configuration, vulnerabilities, assets, software) to detect trends, and identify risks.
• Recommend risk mitigation strategies for common vulnerability trends identified.
• Develop procedures for continuous monitoring of network systems and devices.
• Manage and review NSS Performance Plan Metrics; report discrepancies to compliance leadership (ISSO and ISSM).
• Support audits (e.g., FISMA, GAO, OIG) with required documentation and responses.
• Review and analyze system design, architecture, and interconnection documentation, including Security Architecture Diagrams, and compare to System Security Plans (SSPs), identifying discrepancies and / or misalignments.
• Draft POA&Ms, and conduct POA&M analysis. Advise on development of mitigation plans and milestones, advise on closing artifacts, review artifacts and evaluate POA&M for closure, make recommendations to Federal Stakeholders.
• Provide input on waivers and / or accepted risks as it relates to POA&M management processes, including clearly articulating compensating controls in place to mitigate risk.
• Create Security Impact Analysis (SIA) reports based on engineering assessments.
• Develop and deliver presentations on security engineering topics to stakeholders across all levels of the organization.
• Apply in-depth working knowledge of continuous monitoring practices.
• Review and analyze security scan results as outputs from various scanning tools relevant to all layers : Operating System, application, and database.
• May be asked to execute scans using available tools in the government environment including Tenable Nessus and other web application and database scanning tools.

Basic Qualifications

Preferred Qualifications

Evolver Federal is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver Federal not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military / veteran status, or any other factor protected by law. Actual salary will depend on factors such as skills, qualifications, experience, market and work location. Evolver Federal offers competitive benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.