This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
This position will perform cybersecurity analysis and support required for Risk Management Framework (RMF) Assessment and Authorization (A&A) packages supporting the Airborne Systems Integration (ASI) and Combat Identification Systems (IDS) Divisions at Webster Outlying Field (WOLF). The candidate, serving in the role of Information System Security Engineer (ISSE), will plan, implement, upgrade, or monitor security measures for the protection of tactical systems and information.
Job Responsibility:
Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies
Ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure
Manage all aspects of the RMF process from start to finish and support accreditation package development through customer acceptance
Fully understand and execute all RMF steps necessary for creating A&A packages in accordance with DoD, Defense Information Systems Agency (DISA), and Federal cybersecurity requirements
Perform ACAS scans and complete Security Technical Implementation Guides (STIGs) on the systems or networks under test, as required
Develop and maintain required RMF artifacts
Monitor and maintain system Enterprise Mission Assurance Support Service (eMASS) records
Conduct Cybersecurity testing analysis and provide overall vulnerability and risk assessment reports
Draft, track and monitor Plan of Action and Milestones (POA&Ms)
Work closely with the Information Systems Security Manager (ISSM), assigned Information System Security Engineer(s) and System Administrators to ensure system compliance with Federal and DoD regulations, and cybersecurity best practices
Prepare detailed descriptions of issues, status updates, recommendations, and reports for all levels of the organization
Serve as the system’s primary action officer with regards to cybersecurity
Requirements:
Bachelor’s degree in cybersecurity, computer science, IT, or another related field (required)
At least one (1) of the following certifications required: Security + CE, CGRC (formerly CAP), CASP+ CE, CISSP
Three (3) to seven (7) years of experience with RMF and A&A package development (required)
Experience with eMASS tool (required)
Strong facilitation skills when communicating results of findings
Well organized and a strong attention to detail
Strong customer relations, analytics, and documentation skills
Self-starter, highly motivated, strong work ethic with a commitment to quality
Microsoft office suite proficiency, i.e., Word, Excel, PowerPoint
Ability to work within a challenging, fast-paced, team-oriented environment
Ability to work independently
Ability to multi-task and meet competing, deliverable deadlines
Detail oriented
Excellent interpersonal and customer service skills
Excellent verbal and written communication skills to provide clear status and/or adequately communicate issues
Ability to adapt to evolving technology
U.S. Citizen
Active Secret Security Clearance
Ability to obtain a Top-Secret Security Clearance
Nice to have:
Experience with security/validation testing tools to include vulnerability scanners (Nessus) and DISA STIGs (desired)
Experience with Navy RMF Process Guide and Standard Operating Procedures (SOPs) (desired)
Experience applying RMF/cybersecurity to tactical systems (desired)
Experience working in a DoD environment (Contractor/Civilian/Military) (desired)
What we offer:
Medical Coverage with option for Heath Savings Account