• Implement Security Engineering activities, including design, testing, configuration, management, and maintenance of information systems.
• Implement the evaluation, qualification, testing and delivery of security architecture improvement, obsolescence replacement, compliance certification and vulnerability response projects.
• Comprehensive knowledge of cyber offense and defense requirements, design, and implementation.
• Provides inputs to technical security needs to non-security team members in a manner that facilitates cross-functional design activities.
• Identify security risks, threats and vulnerabilities of networks, systems, applications, and new technology initiatives (hardware, software, cross-domain solutions, cryptographic devices, firewalls, intrusion detection systems, anti-virus systems and software deployment tools).
• Comprehensive knowledge of principles of data flows (e.g., TCP/IP, OSI model), cyber security certification experience NIST Risk Management Framework (RMF), NSA Type 1 and communications security experience, i.e., COMSEC, TRANSEC.
• DoD 8570.01-M IAT Level 2 certification (e.g. CySA+, GICSP, GSEC, Security+CE, SSCP, or CCNA Security).
• DoD 8570.01-M IASAE Level 2 certification (e.g. CASP+ CE or CISSP (or Associate)).
• Familiarity with TEMPEST procedures and testing processes
• Strong understanding of engineering processes, concepts and information security systems engineering principles (NIST SP 800-160 Vol1).
• Please be aware that many of our positions require a security clearance or the ability to obtain one. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. No Dual Citizens for this role.

Required Qualifications:

• Bachelor’s Degree and minimum 9+ years of related experience (or 7+ years with a Master’s degree). In lieu of a degree, minimum of 13 years of prior related experience.

Preferred Qualifications:

• Experience in configuration and use of cyber defense and vulnerability assessment tools such as ACAS and SCC
• Experience in writing and managing RMF body of evidence documents (e.g., System Security Plan (SSP), Security Compliance Traceability Matrix (SCTM), Risk Assessment Report (RAR), Continuous Monitoring (ConMon) Plan, and Security Assessment Plans and Procedures (SAPP).
• Experience in the content development and administration of SEIM/audit reduction tools (e.g., Splunk)
• Experience with application of STIGs.
• Experience with IBM Rational DOORS for requirements management
• Experience with radio communication protocols and Telecommunications networks

NA