Information Assurance Security Engineer

D2 Technical Services

$130K — $140K *
Aerospace & Defense
8 - 10 years of experience
Job Overview by Ladders

Qualifications

  • 10+ years in information security or related field
  • Active TS/SCI security clearance
  • IAM Level II certification required
  • Knowledge of ICD 503 and RMF processes
  • Experience with security tools like ACAS and Carbon Black
  • Familiarity with Cloud Infrastructure/AWS
  • Scripting experience in UNIX and RHEL
  • Proficient in Microsoft PowerShell and complex macro scripting
  • Hands-on experience with network security technologies
  • Working knowledge of Windows Active Directory and VMware
  • Solid understanding of network routing and VLAN technologies
  • Bachelor's degree in Computer Science or equivalent

Responsibilities

  • Draft and review security policies and agreements
  • Lead Certification & Accreditation and RMF processes
  • Review POA&Ms and drive technical remediation
  • Ensure compliance of solutions with security guidelines
  • Advise on security-first system design and architecture
  • Define and evaluate information security systems
  • Perform maintenance of network security infrastructure
  • Conduct forensic log analysis for incident response
  • Initiate corrective measures for discovered vulnerabilities
  • Execute vulnerability remediation using ACAS
  • Support troubleshooting requests for network security functions
  • Engage with stakeholders on information security matters
  • Deliver security awareness training to users
  • Present findings to leadership as required

Benefits

  • Health/Dental/Vision insurance
  • 401(k) matching
  • Accrued Paid Time Off (PTO)
  • Short/Long Term Disability and Life Insurance
  • Referral Bonuses
  • Professional development reimbursement
  • Additional benefits as applicable
Full Job Description
**ACTIVE TS/SCI SECURITY CLEARANCE REQUIRED**

What You'll Be Doing

Policy, Compliance & Accreditation
  • Draft and review information security policies, Memoranda of Agreement (MOAs), and System Security Plans (SSPs)
  • Lead and coordinate all aspects of Certification & Accreditation (C&A) and Risk Management Framework (RMF) processes
  • Review Plan of Action & Milestones (POA&Ms) and drive technical remediation and lien resolution
  • Ensure IA hardware, software, and configurations comply with established security guides and A&A documentation

Architecture & Engineering
  • Advise on system design and architecture from a security-first perspective - working with developers, engineers, and project managers to build protection in from day one
  • Define, design, and evaluate information security systems and multi-agency integration security
  • Perform advanced configuration and maintenance of network security infrastructure: firewalls, web/mail gateways, IDS, load balancers, and performance monitoring tools

Operations & Incident Response
  • Conduct forensic traffic and log analysis to isolate issues and respond to analyst alerts
  • Initiate protective and corrective measures when incidents or vulnerabilities are discovered
  • Execute vulnerability remediation using ACAS security scans and related tools
  • Respond to escalated troubleshooting requests and support O&S functions for network security infrastructure

Stakeholder Engagement & Training
  • Maintain relationships with senior personnel across multiple agencies involved in information security
  • Develop and deliver security awareness training to ensure users understand their responsibilities before system access
  • Present monitoring results, test reports, and findings to leadership as required
What We're Looking For

Required:
  • 10+ years of experience in information security, data security administration, or a related discipline
  • Active TS/SCI clearance
  • IAM Level II certification (per DoD 8570.01-M) required to start
  • Working knowledge of ICD 503 and RMF processes
  • Experience with security tools: ACAS, HBSS, Carbon Black, Tanium, RedSeal, and/or EMET
  • Experience with Cloud Infrastructure / AWS-based solutions
  • Scripting experience on UNIX and/or RHEL operating systems
  • Experience with Microsoft PowerShell and complex macro scripting
  • Hands-on experience installing, hardening, and troubleshooting network perimeter security technologies
  • Working knowledge of Windows Enterprise Active Directory and VMware virtualization
  • Solid understanding of network routing and VLAN technologies
  • Bachelor's degree in Computer Science, a related field, or equivalent experience

Bonus Points For:
  • CISSP or equivalent certification (CAP, GSLC, CISM)
  • System or network administration background
  • System design and development experience
What to Expect Day-to-Day

This is a senior role with real responsibility and real variety. No two days look exactly alike - you might be reviewing an architecture proposal in the morning, investigating a security alert in the afternoon, and briefing leadership on remediation progress before the day is out. You'll work across IT teams, interface with multi-agency stakeholders, and be the kind of trusted advisor that programs depend on. The environment is fast-paced, team-oriented, and the mission is always in focus.

Additional Information
  • Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically $130-140k. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.
  • Highlights of our benefits include Health/Dental/Vision, 401(k) match, Accrued PTO, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and more!

Similar Jobs

More Jobs at D2 Technical Services

More Aerospace & Defense Jobs

Find similar Information Assurance Security Engineer jobs: