Information Assurance Security Engineer

Bridge Core (BCore)

$90K — $120K *
Information Technology
8 - 10 years of experience
Job Overview by Ladders

Qualifications

  • Active TS clearance with SCI eligibility and ability to obtain CI Poly
  • IAM II certification in line with DOD 8570.1M
  • Bachelor's degree in Computer Science or related field, or equivalent experience
  • 10-15 years of related experience in data security administration
  • Experience with ICD 503 and AWS-based solutions

Responsibilities

  • Write and review information security policies and agreements
  • Provide expert technical services on information security
  • Maintain relationships with high-level personnel in various organizations
  • Advise on system design and evaluate security systems
  • Manage multi-agency information security integration
  • Conduct incident response and system access approvals
  • Document and investigate security incidents and recommend corrective actions

Benefits

  • Health/Dental/Vision insurance
  • 401(k) match
  • Universal Leave
  • Short-term and long-term disability insurance
  • Life insurance and voluntary life insurance options
  • Employee referral bonuses and recognition through awards
Full Job Description
Overview

Information Assurance Security Engineer

Springfield, VA or Arnold, MO

Active TS (SCI eligibility) clearance and eligibility to obtain a CI poly

Do you want to join a team that is building tailored technical solutions to modernize our government27s mission and our client27s business? Do you have a desire to change how people work? Are you interested in helping to protect our nation27s cyber interests? Join our growing team supporting the NGA customer missions as an Information Assurance Security Engineer.

Responsibilities What you get to do every day:
  • Responsible for writing information security policy drafts, writing and reviewing Memorandum of Agreements and coordinating and managing all aspects of the Certification and Accreditation.

  • Provide expert technical services on all aspects of Information Security

  • Maintain affiliations with high-level personnel at multiple agencies and organizations involved in Information Security.

  • Advise and assess system design/architecture as well as defining, designing and evaluating information security systems.

  • Manage multi-agency information sharing and integration security.

  • Tasking includes incident response, system access approval, audit log review, Configuration Control Board and dailyconsultations/consultingon a wide variety of security issues.

  • Report, document and investigate all security related incidents; assist with development and implementation of corrective measures.

  • Work with all IT groups to build IT systems with security planned from the start. Work with developers, system engineers, project managers, and users to identify the level of protection systems will need.

  • Understand and be able to identify what group or process will satisfy security requirement.

  • Act as the representative of the Information System Security Manager ensuring compliance with IS security procedures.
  • Support efforts to operate, maintain, and dispose of information system materials in accordance with security directives, policies and practices and as annotated in Systems Security Plans.
  • Generate and implementation of requisite security training ensuring user security awareness of responsibilities prior to system access.
  • Initiate protective and corrective measures when incident or vulnerabilities are discovered.
  • Ensure IA hardware and software complies with security configuration guides.
  • Implement and enforce IA policies and procedures as defined by A&A documentation.
  • Ensure users are aware of their IA responsibilities.
  • The ability to work on multiple projects/tasks at once and operate in a dynamic, fast-paced, team-oriented environment.
  • Perform Operations & Sustainment (O&S) functions for the NCE network security infrastructure (firewalls, web gateways, mail gateways, ids, load balancers, performance monitoring tools, mgt systems, etc)
  • Perform maintenance and/or advanced configuration of equipment in order to protect the network from emerging cyber threats
  • Conduct forensic traffic/log analysis to isolate issues or respond to analyst alerts
  • Respond to escalated troubleshooting requests
  • Maintain and administer network infrastructure standards, documentation and fault tolerance
  • Present Monitoring/Test Results and Reports as required
  • Participates in special projects as required.
  • Ability to review Plan of Action and Milestones (POA&Ms) and conduct a technical decomposition categorization, remediation, and lien resolution
  • Execute remediation process to implement technical solutions to address vulnerability findings via ACAS security scan
Qualifications

Clearance Required: Active TS clearance (with SCI Eligibility) and eligibility to obtain CI Poly

Certification Required: IAM II certification

Education/Experience:

  • Requires Bachelor's Degree in Computer Science, or a related technical discipline, or the equivalent combination of education, technical training, or work/military experience
  • 10-15 years of related experience in data security administration
Required Skills:
  • Unique/Additional Requirements:

    • Candidate must have knowledge of and experience with ICD 503 and be familiar with CloudInfrastructure/AWS-basedsolutions.

    • Candidate must possess IAM II certification to start in accordance with DOD 8570.1M. This position is defined as in 8570.1M chapter 4, pg 35. Candidate is required to understand how our customer's RMF process work and how systems security requirements will be met.

  • Experience using security tools such as ACAS, HBSS, Carbon Black, Tanium, RedSeal, EMET

  • Experience instlaling, hardening, deploying, documenting, and troubleshooting network perimeter security technologies

  • Experience and scripting ability on Unix and/or RHEL OS

  • Experience with complex Microsoft macraos and PowerShell scripts

  • Basic understanding of Windows Enterprise AD architecture and VMWare Virtualization

  • Proficient in network routing/vlan technology

  • System design and development experience:

    • Defines, plans, designs, and evaluates information security systems.

    • Assesses architecture and current hardware limitations, defines and designs system specifications, input/output processes and working parameters for hardware/software compatibility.

    • Performs a variety of complex tasks associated with information security ranging from the design of security components to complex architectures.

    • Supervise the work of other engineers performing a variety of information security tasks

What is ideal?

  • CISSP certification or equivalent (CAP, GLSC, CISM)
  • System administration experience
  • System design and development experience
  • Intelligence Community Experience preferred
What you can expect from us
  • Recognizing great achievements do not go unnoticed by bcore through service anniversaries, spot awards, and employee referral bonuses
  • You27ll join a growing organization of passionate, top-shelf, IT engineering professionals with extensive experience in actively developing the technology revolution in the Intelligence community
  • Highlights of our benefits include Health/Dental/Vision, 401(k) match, Universal Leave, STD/LTD/Life Insurance/Voluntary Life Insurance, Stipends, Referral Bonuses, and more!
  • Compensation is unique to each candidate and compensation packages are based on education, experience, and other requirements.

Similar Jobs

More Jobs at Bridge Core (BCore)

More Information Technology Jobs

Find similar Information Assurance Security Engineer jobs: