System Security Plan

System Security Plan Cybersecurity Jobs

6 jobs found

3d ago

Information Systems Security Engineer (ISSE), Journeyman

CGI Group, Inc. Arlington, VA

Arlington, VA

3d ago

$100k - $150k/yr Full time Information Security Information Systems InfoSec

Apply Now

Job Description

The Information Systems Security Engineer (ISSE) designs, implements, and manages security solutions for information systems in a hybrid Arlington, VA environment, ensuring compliance with security standards and conducting risk assessments. Compensation ranges from USD 100,000 to 150,000 per year.

Responsibilities

Security architecture design and deployment for information systems, covering hardware, software, and network components.
Identify security risks, assess potential impact, develop mitigation strategies, and apply security controls to address vulnerabilities.
Ensure systems align with applicable security policies, regulations, and standards such as NIST, RMF, and ICD 503.
Perform vulnerability scans, interpret findings, and recommend remediation actions.
Create and maintain security documentation, including system security plans, security assessment reports, and risk management plans.
Collaborate with system administrators, network engineers, software developers, and other stakeholders to integrate security throughout the system development lifecycle.
Participate in continuous monitoring activities to maintain security posture and compliance.
Contribute to incident response efforts, including investigating security incidents, analyzing malware, and supporting forensic analysis.

Requirements

Bachelor's degree and/or 2 to 5 years of experience.
Active TS/SCI clearance with polygraph required.
Strong knowledge of security principles, technologies, and best practices.
Experience applying the Risk Management Framework (RMF) to information systems.
Understanding of secure system design principles and experience developing secure architectures.
Knowledge of various security controls and their implementation.
Experience with vulnerability scanning tools and techniques.
Ability to create and maintain security documentation.
Excellent verbal and written communication skills to collaborate with diverse teams.
Strong analytical and problem-solving abilities to address complex security challenges.
Relevant certifications such as CISSP, CISM, CAP, or other equivalent security credentials.

Technologies

RMF
NIST
ICD 503

Benefits

Competitive compensation
Comprehensive insurance options
Matching contributions through the 401(k) plan and the share purchase plan
Paid time off for vacation, holidays, and sick time
Paid parental leave
Learning opportunities and tuition assistance
Wellness and Well-being programs

View full job page →

3d ago

Classified Cybersecurity Analyst 2/3 - Secret

Northrop Grumman Palmdale, CA

Palmdale, CA

3d ago

$92k - $171k/yr Full time Cybersecurity Tools Information Security Information Technology (IT)

Apply Now

Job Description

On-site role at Northrop Grumman in Palmdale, CA, with occasional travel to Edwards AFB, supporting lifecycle activities and security compliance for classified programs.

Responsibilities

Conduct system audits and continuous monitoring across all security controls, configurations, and processes to evaluate information system security posture.
Assess systems and networks within the enclave to identify deviations from acceptable configurations, enclave policy, or local policy.
Analyze to validate established security requirements and propose additional safeguards and requirements.
Assist in implementing government policy, suggest process tailoring, and participate in and document related activities.
Operate within strict program control processes to mitigate risks and support the Assessment and Authorization of systems, including process support, analysis, coordination, security certification testing, documentation, investigations, software/hardware introduction and release, emerging-technology research, inspections, and audits.
Support formal Security Test and Evaluation required by accrediting authorities through pre-test preparations, participation, results analysis, and reporting.
Document results of A&A activities and related coordination, then prepare the Risk Management Framework body of evidence.

Requirements

Basic qualifications Level 2: Master’s degree with 0 years of relevant experience; OR Bachelor’s degree with 2 years; OR Associate’s degree with 4 years; OR High School Diploma/GED with 6 years of relevant experience.
Basic qualifications Level 3: Master’s degree with 3 years of relevant experience; OR Bachelor’s degree with 5 years; OR Associate’s degree with 7 years; OR High School Diploma/GED with 9 years of relevant experience.
Must have a Security+ or greater certification.
Current US Government Secret level security clearance (minimum) with the ability to obtain and maintain a Top Secret clearance.
Must have the ability to obtain and maintain access to Special Programs as a condition of continued employment.

Preferred Qualifications

Bachelor’s degree in Cybersecurity or a related field.
Top Secret/SCI, SAP/SAR access, and/or a Polygraph.
Certifications such as CAP, SecurityX, CCISO, HCISPP, CISM, GSLC, CISSP-Associate, or CISSP.
Experience in cybersecurity compliance, for example RMF based Assessment & Authorization.
Knowledge of security tools like ACAS, Nessus, Splunk, Trellix, and SCAP.
Familiarity with security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.

Technologies

ACAS
Nessus
Splunk
Trellix
SCAP
NIST
JSIG
DAAG
SSPs
POA&Ms
SCTMs

Benefits

Flexible work arrangements
Learning opportunities
Exposure to a wide variety of projects and customers
Friendly team environment
Benefits and healthcare
9/80 work schedule
401k matching program
Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off

Relocation Assistance

Relocation assistance may be available

Clearance and Travel

Clearance to start: Yes
Clearance type: Secret
Travel: Yes, approximately 25% of the time

Compensation

Primary level salary range: $91,800.00 - $137,600.00 per year
Secondary level salary range: $114,000.00 - $171,000.00 per year

View full job page →

4d ago

Cybersecurity Systems Engineer/Information Systems Security Engineer (ISSE) - TS/SCI with Polygraph

General Dynamics Information Technology Washington, DC

Washington, DC

4d ago

$164k - $213k/yr Full time Information Security InfoSec ISSM

Apply Now

Job Description

General Dynamics Information Technology is seeking a seasoned Cybersecurity Systems Engineer/ISSE (TS/SCI with Polygraph) to lead RMF A&A activities for government systems on site in Washington, DC. The role focuses on managing accreditation processes, developing security documentation, and coordinating artifacts to satisfy RMF and ICD 503 Security Accreditation requirements. The position offers a salary range of USD 164,382 to 212,750 per year and requires an active TS/SCI with Polygraph.

Responsibilities

Direct Accreditation and Authorization (A&A) reviews conducted by group level ISSMs and Security Controls Assessors (SCA).
Compile and document security control implementations, assembling artifacts to support RMF and ICD 503 Security Accreditation across A&A efforts.
Capture and understand the architecture for each project to draft Systems Security Plans (SSP) and CONOPS.
Collaborate with system owners, project managers, and engineering teams to produce additional A&A documents such as Contingency Plan (CP), General User Guide (GUG), Privileged User Guide (PUG), and Standard Operating Procedures (SOPs).
Record Plans of Actions and Milestones (POA&Ms) implementation responses and mitigations, providing required artifacts and evidence from owners, PMs, and engineering teams.
Coordinate with contractor and customer personnel to obtain A&A content and navigate the customer A&A process with security organizations to achieve ATD, IATT, and ATO for primary and secondary systems.
Monitor A&A projects within the customer process and articulate status across all organizational levels.
Support audit liaison activities and compliance oversight to strengthen the security program and RMF compliance.
Conduct technical content reviews and edits as part of annual ISCM and OA Strategy Plan updates.
Perform technical review and updates of the control volatility section, considering emerging threats, posture changes, IC guidance, policy, laws, and information profiles (e.g., HVA, TS/SCI, Secret).
Provide audit liaison support for internal and external audits and data calls; deliver concise, actionable recommendations and process improvement reports.

Requirements

Education and experience: technical training, certifications or degree plus 10 years in the field.
Certification: DoD 8570.01-M IASAE Level II.
Security clearance: Active TS/SCI with Polygraph.
Location: On customer site.

Technologies

RMF
ICD 503 Security Accreditation
ISCM

Benefits

Growth: AI powered career tool that identifies career steps and learning opportunities.
Support: An internal mobility team dedicated to helping you achieve your career goals.
Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay plus paid time off.
Community: Award winning culture of innovation and a military friendly workplace.

Work requirements

10+ years of related experience.
May vary based on technical training, certification(s), or degree.
None beyond listed requirements.
U.S. citizenship is required.

View full job page →

7d ago

Staff/Sr. Principal Cybersecurity Systems Engineer (CSE)

Northrop Grumman Oklahoma City, OK

Oklahoma City, OK

7d ago

$128k - $239k/yr Full time Senior Application Security Cybersecurity Tools

Apply Now

Job Description

Northrop Grumman is seeking a Staff or Senior Principal Cybersecurity Systems Engineer to contribute to the B-2 program in Oklahoma City, with on-site work. The role centers on identifying software and hardware vulnerabilities, building automation for cybersecurity processes, and guiding secure system layout and verification throughout the lifecycle.

Responsibilities

Address intricate technical challenges tied to core cybersecurity concepts.
Provide technical leadership in cybersecurity topics and activities.
Evaluate software static analysis results.
Perform cybersecurity impact appraisals and evaluations for hardware projects.
Generate and maintain artifacts required for Air Force authorization decisions.
Conduct system vulnerability scans using tools such as ACAS and STIGs.
Execute manual STIG and SRG verifications across diverse equipment, collecting and evaluating findings.
Classify systems based on impact analysis.
Develop artifacts for RMF packages, including the System Security Plan, Continuous Monitoring Plan, Risk Assessment Report, Security Control Traceability Matrix, and Plan of Actions & Milestones.
Participate in and lead systems engineering activities throughout the system development lifecycle.
Engage in Systems Engineering Technical Review events (PDR, CDR, SRR, TRR) across the lifecycle.
Apply and evaluate cybersecurity verification and validation methods for system requirements.

Requirements

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Systems Engineering, Cybersecurity Engineering, or another STEM field with a minimum of 12 years of relevant experience; or 10 years with a Master’s degree; or 8 years with a PhD.
Demonstrated experience in cybersecurity vulnerability assessments and evaluations.
Knowledge of NIST 800-53, NIST 800-171, NSS/CSA PM 9-12, and JSIG.
Current or active DoD Secret clearance.
Current CISSP or Security+ CE certificate or IAM III certification or higher, or the ability to obtain Security+ CE certificate within 6 months.
Ability to be program cleared.
Additionally, a related degree with 8+ years of experience or other combinations are listed for senior levels (see below).

Technologies

ACAS
STIGs

Benefits

Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
PTO for vacation and personal time

Salary

Primary level: 127,900.00 - 191,900.00 USD per year
Secondary level: 159,400.00 - 239,000.00 USD per year

Basic Qualifications for a Staff Cyber Systems Engineer / Level 5

Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Systems Engineering, Cybersecurity Engineering, or another STEM field with a minimum of 12 years of relevant experience; or 10 years with a Master’s degree; or 8 years with a PhD.
Demonstrated experience in cybersecurity vulnerability assessments and evaluation.
Knowledge of NIST 800-53, NIST 800-171, NSS/CSA PM 9-12, and JSIG.
Current or active DoD Secret clearance.
Current CISSP or Security+ CE certificate or IAM III certification or higher, or ability to attain Security+ CE certificate within 6 months.
Ability to be Program cleared.

Basic Qualifications for a Senior Principal Cyber Systems Engineer / Level 4

Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Systems Engineering, Cybersecurity Engineering, or another STEM field with a minimum of 8 years of relevant experience; or 6 years with a Master’s degree; or 4 years with a PhD.
Demonstrated experience in cybersecurity vulnerability assessments and evaluation.
Knowledge of NIST 800-53, NIST 800-171, NSS/CSA PM 9-12, and JSIG.
Current or active DoD Secret clearance.
Current Security+ CE certificate or IAM II certification or higher, or ability to attain Security+ CE certificate within 6 months.
Ability to be Program cleared.

Preferred Qualifications

Program cleared
Current CSSLP, CISSP or other IAM III certification per DoD 8140

View full job page →

9d ago

Cybersecurity, Senior (ISSM)

Torch Technologies Kettering, OH

Kettering, OH

9d ago

Full time Manager Senior Application Security

Apply Now

Job Description

Responsibilities

Provide the PMO/ Capability Development Manager (CDM) cybersecurity support per DoWI 8500.01 to include assessing and continuously monitoring cybersecurity risk ensuring that legacy and new capabilities adhere to enterprise standards such as RMF, CSF, and NIST and per Authorization Official’s Information System’s Continuous Monitoring (ISCM) strategy.
Complete and maintain required cybersecurity certifications IAW AFMAN 17-1303.
Ensure all AF IT cybersecurity-related documentation is current and accessible to properly authorized individuals.
Support the PM or ISO in maintaining current authorization to operate, approval to connect (if required), and implementing corrective actions identified in the plan of actions and milestones.
Coordinate, with the PM and AO staffs, development of an ISCM strategy and monitor any proposed or actual changes to the system and its environment.
Continuously monitor the IT and environment for security-relevant events.
Assess proposed configuration changes for potential impact to the cybersecurity posture.
Assess the quality of security controls implementation against performance indicators.
Ensure cybersecurity-related events or configuration changes that impact AF IT authorization or adversely impact the security posture are formally reported to the AO and other affected parties, such as IOs, stewards, and AOs of interconnected IT.
Ensure all ISSOs and privileged users receive necessary technical training and obtain cybersecurity certification IAW AFMAN 17-1301, AFMAN 17-1303, and maintain proper clearances IAW DoWI 8500.01.
Ensure the AF IT is acquired, documented, operated, used, maintained, and disposed of properly IAW DoWI 5000.02 and DoWI 8510.01.

Requirements

U.S. Citizenship
Master's or Doctorate Degree in a related field and 10 years of experience in the respective technical/professional discipline, five years of which must be in the DoW OR
Bachelor's Degree and 12 years of experience in the respective technical/professional discipline, five of which must be in the DoW OR
15 years of directly related experience with proper certifications as described in the PWS labor category performance requirements, eight of which must be in the DoW.
Knowledge, experience, and demonstrated ability to be highly skilled in the technical/professional field.
Ability to perform tasks independently and oversee junior and journeyman contractor personnel within the technical/professional discipline, with advanced knowledge of applicable standards, procedures, and practices.
Access control; configuration management; system and communications protection; contingency planning; incident handling; system and information integrity; security and privacy training and awareness; and software development activities related to cybersecurity.
Experience performing cybersecurity duties as outlined in DoDI 8500.01, AFI 17-130, and AFI 17-1301 for assigned AF IT.
Experience validating, evaluating, and analyzing findings and developer adjudications using automated testing tools (Fortify, Checkmarx, SonarQube, AppScan).
Experience utilizing DoD tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests in programs' tracking systems (e.g., Jira, HP ALM, eMASS).
Experience conducting information security continuous monitoring (ISCM) to support organizational risk management decisions per approved ISCM strategy.
Certifications: ISACA CISM, United America Technologies CISSO, FITSP-M, GIAC GCIA, GCSA, GCIH, GSLC, GICSP, (ISC)2 CISSP-ISSMP, CISSP.

Technologies

Fortify
Checkmarx
SonarQube
AppScan
Jira
HP ALM
eMASS
Confluence
Mavin
Jenkins
Bitbucket

Benefits

ESOP participation
401(k) match and safe-harbor contribution
Medical, dental, vision, and life insurance
Short-term and long-term disability
Flexible spending accounts, Health Savings Accounts, and Health Reimbursement Accounts
EAP
Education assistance
Paid time off and holidays

Preferred Qualifications

Certified SCRUM Master
Other Agile Certifications
Working knowledge of Agile Development methodology
Experience using tools such as CheckMarx, SonarQube, Jira, Confluence, Mavin, Jenkins, Bitbucket

Schedule

40 Hrs/week

Work Location

Kettering, OH

Travel

0-10%

Relocation Assistance Available

Position Contingent Upon Award of Contract

View full job page →

9d ago

Sr Principal Cybersecurity Analyst

Northrop Grumman Roy, UT

Roy, UT

9d ago

$123k - $184k/yr Full time Manager Senior Analytics

Apply Now

Job Description

This on-site role in Roy, Utah focuses on managing the cybersecurity program for assigned information systems and leading A&A, ST&E, and security assessment activities for classified environments requiring Top Secret clearance.

Benefits

Flexible work arrangements
Learning opportunities
Exposure to a wide variety of projects and customers
Health insurance coverage
Life and disability insurance
Savings plan
9/80 work schedule
401k matching program
Paid holidays and PTO

Relocation Assistance

Relocation assistance may be available

Clearance Required for Start

Yes

Clearance Type

Top Secret

Travel

Yes, 10% of the Time

Technologies

ACAS
Nessus
Splunk
Trellix
SCAP
NIST
JSIG
DAAG
SSPs
POA&Ms
SCTMs

Responsibilities

Manage the cybersecurity program for all assigned information systems and execute all cybersecurity tasks.
Lead regular reviews of system audits and continuous monitoring, covering all security controls and configurations to strengthen the information system security posture.
Assess systems and networks within the enclave and identify deviations from acceptable configurations or policies.
Analyze to validate established security requirements and recommend additional safeguards.
Drive implementation of applicable government policy, tailor processes as needed, and participate in documented process activities.
Establish and oversee strict program control processes that mitigate risk and support system Assessment and Authorization (A&A), including process support, coordination, security certification testing, documentation, investigations, and technology evaluations.
Lead the formal Security Test and Evaluation (ST&E) required by accrediting authorities, from pre-test preparations through test participation, result analysis, and reporting.
Document A&A and inspection results along with any technical or corrective actions, coordinating with the security team to prepare responses for the cognizant authority.
Prepare, review, and submit A&A documentation such as System Security Plan, Risk Acceptance Report, Security Controls Traceability Matrix, and Plan of Action and Milestones for review and approval.

Requirements

Master's degree with 6 years of relevant experience; or Bachelor's with 8 years; or Associate's with 10 years; or High School Diploma/GED with 12 years of relevant experience
Must meet United States Government 8140 requirements for a Senior Principal Cybersecurity Analyst
Current U.S. Government Top Secret Security clearance (or enrollment in Continuous Evaluation) with a closed investigation date within the last 6 years
Ability to obtain and maintain access to Special Access Programs as a condition of employment

View full job page →

System Security Plan Cybersecurity Jobs

Information Systems Security Engineer (ISSE), Journeyman

Classified Cybersecurity Analyst 2/3 - Secret

Cybersecurity Systems Engineer/Information Systems Security Engineer (ISSE) - TS/SCI with Polygraph

Staff/Sr. Principal Cybersecurity Systems Engineer (CSE)

Cybersecurity, Senior (ISSM)

Sr Principal Cybersecurity Analyst

Get System Security Plan Cybersecurity Jobs alerts