Security Certification & Accreditation Engineer Jobs

1 job found

Today

Staff Cybersecurity Analyst / Information Systems Security Engineer (ISSE)

Northrop Grumman Chantilly, VA

Chantilly, VA

Today

$177k - $266k/yr Full time Cloud Platforms Cybersecurity Tools Information Security

Apply Now

Job Description

Benefits-focused mission work with a role supporting mission critical network infrastructure and Assessment & Authorization (A&A) accreditation activities for customer products. This onsite position in Chantilly, VA offers base pay in the range of USD 177,000 to 265,600 per year, along with health and time-off support and opportunities for additional compensation depending on position.

Responsibilities

Conduct assessments of systems and networks in the networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy using passive evaluations (such as compliance audits) and active evaluations (such as vulnerability assessments).
Apply strict program control processes to mitigate risk and support certification and accreditation, including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research inspections, and periodic audits.
Assist with implementation of required government policy, including recommendations on process tailoring, and participate in and document process activities (including NISPOM and DCID 6-3).
Perform analyses to validate established security requirements and recommend additional security requirements and safeguards.
Support formal Security Test and Evaluation (ST&E) for each government accrediting authority, including pre-test preparations, participation in tests, analysis of results, and preparation of required reports.
Document results of Certification and Accreditation activities, including technical and coordination activities. Prepare system Security Plans and update the Plan of Actions and Milestones (POA&M).
Periodically review each system’s audits and monitor corrective actions until all actions are closed.

Requirements

Active TS/SCI with Polygraph is required to be considered and required to start.
Experience level requirements: 12 years with a Bachelor’s, 10 years with a Master’s, 8 years with a PhD, or 16 years with a High School diploma (equivalent experience years specified).
Experience reviewing technical security assessments of computing environments to identify vulnerabilities or non-compliance.
Experience implementing the Risk Management Framework (RMF) process and the ability to support and document certification and accreditation artifacts.
Must have experience supporting the A&A process for system accreditation.
Knowledge of RMF, including applying RMF to accredit a system and nuances in execution.
Familiarity with NIST 800-53 rev. 4, CNSS-1253, NSM-8, and Zero Trust Architecture/Networking (ZTA/N) high-level concepts and potential implementations.
Experience with both initial accreditation activities and continuous monitoring tasks, with willingness to adapt to rapidly changing toolsets and control requirements.
Familiarity with network monitoring and vulnerability detection tools such as Nessus, Rapid7, Splunk, and Xacta.
Strong competency with Microsoft Office (Excel, PowerPoint, and Word).

Technologies

Risk Management Framework (RMF)
NIST 800-53 rev. 4
CNSS-1253
National Security Memorandum 8 (NSM-8)
Zero Trust Architecture/Networking (ZTA/N)
Nessus, Rapid7, Splunk, Xacta
Microsoft Office (Excel, PowerPoint, Word)
Microsoft Windows, Enterprise Linux variants
AWS, Microsoft Azure

Benefits

Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business
Depending on the position, eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
Annual bonuses designed to reward individual contributions and allow employees to share in company results
Employees in Vice President or Director positions may be eligible for Long Term Incentives

Additional Information

Travel: Yes, 10% of the time
Clearance required for start: Yes (Polygraph)
Relocation assistance: No relocation assistance available
U.S. citizenship requirement: U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions
Preferred qualifications: CISSP, CASP, or other IT security certifications; experience using Rapid7 or Tenable Nessus; background in Technical Writing or Instructional Systems Design; privileged/power-user knowledge in at least one of Microsoft Windows or Enterprise Linux variants; cloud infrastructure experience with AWS or Microsoft Azure
Application period: Estimated 20 days from the job posting date (may be shortened or extended based on business needs and candidate availability)

View full job page →

Get Security Certification & Accreditation Engineer Jobs alerts

New Security Certification & Accreditation Engineer Jobs, daily.