Job OverviewThis position is responsible for ensuring programs' adherence to all relevant DoD CS policy, as well as industry CS best practices, to properly protect all sensitive data. As part of the overall Risk Management Framework, the position will support planning, perform testing, assess existing documentation and implementation, and suggest policy improvements to the customer.
ResponsibilitiesEssential Job Duties:- Ensures timeline for projects or tasks are being met with effective time management.
- Responsible for effective communication with client and facilitating weekly or bi-weekly meetings as per client requirements.
- Reads\modifies flowcharts, layouts, diagrams, charts, code comments and clear code to represent software system information.
- Identifies technology limitations and deficiencies in existing systems and associated processes, procedures, and methods.
- Documents/submits all configuration items (required deliverables per life cycle phase/event) in a consistent manner in accordance with policy requirements.
- Drafts comprehensive test plans to assess and validate task or project completion, ensuring alignment with client expectations and industry standards.
- Tests software systems to evaluate functionality, compatibility, and performance.
- Documents and updates functional requirements, develop process flows, maintain related directives and policies and development of Standard Operating Procedures (SOPs) to support the training enterprise.
- Prepares and edits detailed white papers and technical documentation for proposals, providing clear and actionable recommendations for future projects.
- Creates detailed test reports summarizing findings, identifying potential issues, and providing actionable insights to improve system functionality.
- Collaborates with cross-functional teams to ensure effective integration and validation of project deliverables.
- Assists in defining and improving testing methodologies, frameworks, and best practices to enhance overall system quality.
Second Duties:- Ensures that appropriate policies, standards, procedures, and automated mechanisms designed to appropriately protect the security of information are documented, implemented, and followed to ensure long-term consistency.
- Validates that activities and controls enacted to secure information are continually assessed. Evaluates gaps in security and identify solutions to mitigate risk, including business processes, technical controls, or policy improvements.
- Assists various program teams and other stakeholders in capturing and refining information protection requirements, integrating those requirements into system designs, ensuring program compliance with government requirements, and obtaining an Authority to Operate (ATO).
- Recommends additional security requirements and safeguards as appropriate.
- Supports planning and engagement efforts for organizational security evaluations, systems analyses, security architecture reviews, and any other similar tasks.
- Supports formal testing as required by government accrediting authorities to validate established security requirements.
- Updates, builds and configures modular security applications for various UCES environments.
- Performs vulnerability scanning and provides technical support for the Assured Compliance Assessment Solution (ACAS) to the CS Division to ensure confidentiality, integrity, and availability of the network.
- Prepares System Security Plans, updates Plans of Action and Milestones, reviews system audits, and monitors corrective actions until all actions are closed.
- Develops security and privacy policies (in conjunction with IT governance and other policy development groups) that embody industry best practices.
Key Responsibilities:- Timely and cost-effective performance of duties.
- Timely completion and accuracy of all work.
- Dealing with coworkers or clients in a multicultural environment in a professional, courteous manner in diverse situations.
- Adhere to established company safety policies and industrial and office safety practices.
- Compliance with company and contractual Standard Operating Procedures and Personnel policies and procedures.
Job RequirementsMandatory:- Associate degree in computer science or related field; work experience may substitute for a degree.
- Three years of experience in Cybersecurity.
- A DoD 8570-01M IAT Level II Baseline certification (CompTIA Security+ CE, GSEC, SSCP or similar).
- Utilization of Field-Programmable Gate Arrays (FPGA), and J-Link to program processors.
- Proven experience with shell scripting and automation.
- Must have excellent written and oral communication skills.
- Good interpersonal skills and able to work closely in group environments.
- Ability to work in a fast-paced environment with minimal supervision.
- Must have and maintain a DoD Secret Clearance (US Citizenship required).
- Ability to successfully pass any employment background check and/or drug testing required in the contract.
Preferred:- Troubleshoot issues with software and coding languages such as C++, C#, HTML, CSS.
- Experience with security evaluations, risk, and control assessments.
- Experience performing vulnerability scanning using the DISA ACAS.
- Working knowledge of embedded systems.
- Working knowledge of AC/DC electronics.
- Possess a completion certificate within the Domain such as Linux+, RHEL, C++, or similar certifications.
- Understanding of the DoD environment, Navy Shipboard systems and familiarity with government agency reviews and audits.
Working Conditions:- This position is primarily performed in an office setting using standard office equipment (desk, computer, phone, printer, copier, etc.). Work may require travel.
Physical Requirements:- Work requires the ability to operate a computer and work in a standard office environment, effectively communicate information in verbal and written form, read and review information and charts, perform analytical thinking skills, use sound judgement, and travel via vehicle and plane.
