Information Assurance Security Engineer
Job Description
Abile Group, Inc. is seeking an Information Assurance Security Engineer for a 10-year contract supporting an Intelligence Community customer. The position supports user facing and data center IT services across multiple networks and security domains, with a focus on information system security compliance, operations and sustainment, and vulnerability and incident response.
This onsite role is based in Springfield, VA and centers on ensuring security requirements are executed through the system lifecycle, from security training and compliance to protective actions and ongoing monitoring.
Key Responsibilities
- Serve as the representative of the Information System Security Manager to ensure compliance with information system security procedures.
- Support operations, maintenance, and disposal of information system materials in accordance with security directives, policies, practices, and Systems Security Plans.
- Generate and implement security training to ensure user security awareness of responsibilities prior to system access.
- Initiate protective and corrective actions when incidents or vulnerabilities are discovered.
- Ensure IA hardware and software compliance with security configuration guides.
- Implement and enforce IA policies and procedures as defined by A&A documentation, and ensure users are aware of their IA responsibilities.
- Handle multiple projects and tasks in a dynamic, fast paced, team oriented environment.
- Perform Operations and Sustainment (O&S) for NCE network security infrastructure, including firewalls, web gateways, mail gateways, IDS, load balancers, performance monitoring tools, and management systems.
- Maintain and/or perform advanced configuration of network security equipment to protect against emerging cyber threats.
- Conduct forensic traffic and log analysis to isolate issues or respond to analyst alerts, including escalated troubleshooting requests.
- Maintain and administer network infrastructure standards, documentation, and fault tolerance.
- Present monitoring, test results, and reports as required; support integration testing as required.
- Participate in special projects as required.
- Review Plan of Action and Milestones (POA&Ms) and perform technical decomposition categorization, remediation, and lien resolution.
- Execute remediation to implement technical solutions addressing vulnerability findings through ACAS security scans.
Requirements
- Clearance Required: TS/SCI with ability to obtain CI poly.
- Education: Bachelors Degree in Computer Science or related technical discipline (or equivalent combination of education, professional training, or work experience).
- Experience: 10 years of related experience in data security administration.
- Certification: IAM II certification to start in accordance with DOD 8570.1M.
Technologies and Tools
- AWS, ACAS, HBSS, Carbon Black, Tanium, RedSeal, EMET
- Unix, RHEL OS, PowerShell, Windows Enterprise AD architecture, VMware Virtualization, Microsoft macros
- ICD 503
- Firewalls, web gateways, mail gateways, IDS, load balancers, performance monitoring tools, management systems
- ACAS security scan
Desired Certifications
- CISSP certification or equivalent (CAP, GSLC, CISM).
Desired Skills
- System administration experience.
- Network engineering experience.
- System design and development experience.
- Ability to define, plan, design, and evaluate information security systems.
- Experience assessing architecture and current hardware limitations to define and design system specifications, input/output processes, and working parameters for hardware/software compatibility.
- Experience performing complex information security tasks, from security component design to complex architectures.
- Ability to supervise other engineers performing a variety of information security tasks.