Information Assurance Engineer
Job Description:
ECS is seeking an Information Assurance Engineer to support the execution of a variety of projects including Artificial Intelligence/Machine Learning and Big Data/Cloud Solutions.
There is a focus on remaining up to date the current security and Information Assurance requirements for integrating existing AI/ML solutions with new hardware systems in support of the DoD.
The candidate works closely with project and technical teams, customers, and various stakeholders to swiftly prototype, develop, and support solutions in an agile environment and deploy capabilities to the operational end user.
The candidate cultivates an environment that promotes customer service, excellence in communication, innovation, collaboration, and teamwork.
Additional tasks include, but are not limited to:
Provide guidance on the implementation of system specific features and security controls to ensure effective compliance with federal requirements.
Recommend solutions that follow policies and guidelines as outlined within NIST (National Institute for Standards and Technology) SP 800-53, DHS (Department of Homeland Security) 4300A, DHS 4300B Sensitive Systems Policy Test systems against NIST 800-53 controls, DISA (Defense Information Systems Agency) STIGS, CIS Benchmarks, and vendor best practices.
Facilitate the Accreditation and Authorization (A) process, including package preparation for the Authorizing Official (AO) for Authority to Operate (ATO) consideration.
Write, manage, and oversee the closing of POA (Plan of Action and Milestones) items.
Develop and maintain Authorization to Operate (ATO) documentation, to include Plan of Action and Milestones (POA) spreadsheets, FISMA-mandated documents (such as system Incident Response Plans, Contingency Plans, and System Security Plans (SSPs)), and all system-related documentation (such as Account Management policies, hardware/software lists, network diagrams, etc.
).
This is a hands-on position that requires someone who is capable of multi-tasking.
It requires an individual with a service-oriented mentality that can focus and take ownership of assignments/issues and manage/resolve those issues.
Required Skills:
Must be US Citizen BA/BS degree in Computer Science/Engineering or a related Information Technology field or 6 years of equivalent experience Minimum Top-Secret clearance is required with SCI eligibility and IAT Level II certification prior to start date.
8570 IAT Level II Certification Must meet requirements of DoD (Department of Defense) Directives 8570.
01M Experience using/managing an ACAS infrastructure 6
years' experience working in a DOD environment (Contractor/Civilian/Military), preferably Army.
1
years' experience in security test & evaluation under RMF (Risk Management Framework) (DODI 8510.
01, March 2014) in operational IP based network environments.
Extensive Experience with KASM management, GITLAB management and vulnerability scanning tools (ie:
Fortify, twistlock, etc.
) Experience developing Cyber or Physical Security CONOPS (Concept of Operations).
Demonstrated experience with McAfee HBSS (ePO, HIPS, Anti-Virus, etc.
).
Thorough understanding of DoD Information Technology best practices Thorough understanding of DoD Cybersecurity best practices Thorough knowledge of DODD 8500.
1, DODI 8500.
2, and other IA (Information Assurance) guidance.
Demonstrated experience with security / validation testing tools to include vulnerability scanners (Retina, Nessus), DISA STIGs (Security Technical Implementation Guides), SRR, and DISA checklists.
Must be proficient with desktop programs such as Adobe Acrobat, MS Excel, MS Word, MS Visio Desired Skills:
Bachelor's Degree in a computer science-related field Vendor Certification with one or more of the following:
VMWare, MS Windows, and Red Hat Linux.
Vendor Certification with one or more of the following:
Brocade, Cisco.
ITIL (Information Technology Infrastructure Library) Foundation Certification.
Experience with VMWare, Windows, and Red Hat Linux.
Knowledge of Federal Government Authorization processes (NIST 800-53, DHS 4300A / DHS 4300 B, DIACAP, ICD's) Experience creating, maintaining, and reviewing security compliance documentation (Systems Security Plan, Contingency Plan, Risk Assessment, POAMs) ECS is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state, or local law.
ECS promotes affirmative action for minorities, women, disabled persons, and veterans.
ECS is a leading mid-sized provider of technology services to the United States Federal Government.
We are focused on people, values and purpose.
Every day, our 3000
employees focus on providing their technical talent to support the Federal Agencies and Departments of the US Government to serve, protect and defend the American People.
.
Estimated Salary: $20 to $28 per hour based on qualifications.
|
|
 | |
