Federal Audit And Authorization Cybersecurity Jobs

1 job found

Today

Information Systems Security Engineer

ICS Nett United States

United States

Today

Full time Cloud Security Assurance Common Criteria Dss Security

Apply Now

Job Description

Support the security engineering of IT infrastructure and new development efforts, aligned to DoD authorization and evaluation requirements.

Responsibilities

Support and maintain IT infrastructure, applications, and new development projects, with a focus on network security.
Support all phases of an Information Systems Security Engineering Program (ISSE) using ISSE-certified personnel to meet requirements of the DoD A&A Process.
Support development of long-range IT strategic plans.
Maintain and support the DSS IT technical guidelines and framework.
Assess the quality and viability of existing solution architectures and evaluate design integrity.
Evaluate technology products and develop trade studies when needed for potential addition of system functionality.
Support the design of IT system architecture and IT solutions.
Support development of executive orders and agency-wide policies.
Support requirements definition and requirements validation.
Analyze enterprise business models, IT solutions, trends, and emerging technologies.
Provide support in planning and designing availability, capacity, and service continuity.
Provide input to the DCSA A&A Process, including Information Security planning, design, testing, and analysis.
Research and analyze Commercial-Off-The-Shelf (COTS) and Government-Off-The-Shelf (GOTS) and IA-enabled products as part of the security architecture.
Ensure analyzed products are compliant with NSTISSP-11 and validated via NIAP Common Criteria Evaluation and Validation Scheme or NIST FIPS Cryptographic Module Validation Program (CMVP).

Requirements

Minimum 5 years of cybersecurity experience and knowledge of DoD, NIST, Cloud, DISA, and other applicable cybersecurity policies, procedures, and best practices.
Familiar with IT design, installation, integration with cloud, FEDRAMP, and DoD Information Levels.
Active Top Secret or Secret clearance is a MUST.
Must be IAM II or IAT II Certified.

Location

United States (Hybrid)
2 days on site required in Quantico, VA

Education

Associates or Bachelor’s Degree in Information Technology or Engineering

Certification

Must be IAM II or IAT II Certified

Technologies / Frameworks

DoD A&A Process
Information Assurance Technical Framework (IATF)
DoD 5200.1-M
Common Criteria for IT Security Evaluation (ISO/IEC 15480)
NSTISSP-11
NIAP Common Criteria Evaluation and Validation Scheme
NIST Federal Information Processing Standards (FIPS) Cryptographic Module Validation Program (CMVP)
DCSA A&A Process
FEDRAMP
DoD Information Levels

ISSE Deliverables (at the Discretion of the Government)

Service Acceptance Criteria and Service Level Requirements
Service Level Policies, Procedures, and Reports
Service Level Agreements and Operational Level Agreements
Availability Policy, Plans, Design Criteria, Risk Analysis and Reports
Business and IT service continuity policy, strategy, plans, risks, business impact analysis, and reports
Technical Documents
Market Research Analysis and Results
Technical Guidelines and Framework
Technical and Product Evaluation Reports
Technical Studies
Cloud Design Diagram with security impacts, including ingress/egress points from the DSS network to cloud infrastructure, locations of the CND Suite, and method of connecting to the DoD information network (DoDIN)
Cloud Suitability Questionnaire Template to score application suitability for cloud deployment with security impacts
Courses of Action
Proofs of Concept

View full job page →

Get Federal Audit And Authorization Cybersecurity Jobs alerts

New Federal Audit And Authorization Cybersecurity Jobs, daily.