IT Systems Security Engineer

SAIC • Springfield, VA • 7h ago

Description

SAIC is seeking a well-qualified Security Engineer to join an exciting program supporting our customer's Office of Security. This position is located in Springfield, VA.

This program is able to quickly adjudicate a polygraph for those with an active TS/SCI clearance. An active TS/SCI is required to be considered for this role.

This position will be responsible for the following:

Develop, update, and or review Risk Management Framework (RMF) documentation to include (Security Plans, Implementation Plans, Plans of Action and Milestones (POA&Ms), and Risk Assessment Reports.

Assess system compliance against National Institute Standards and Technology (NIST), Department of Defense (DOD), and customer Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRG).

Produce evidence as necessary to compliance status of NIST, DOD and customer security requirements as necessary to meet government requirements.

Work with system administrators, engineers, and developers to create or update system/site policies, procedures, and process guides.

Coordinate with other SME's, internal, and external customers to identify and develop authorization boundary diagrams, architecture diagrams, and hardware and software inventories.

Analyze vulnerability scans of information systems and assist in remediation tasks.

Conduct risk and vulnerability assessment of information systems to identify vulnerabilities, risks, and protection needs.

Facilitate or participate in meetings with stakeholders to discuss statuses and efforts of SIS systems and report to government on findings.

Prepare and submit bi-weekly reports to team leads and government engineering team regarding system/program status.

Serve as a Subject Matter Expert (SME) on one or more technologies/skills related to Assessment & Authorization (A&A) activities.

Actively facilitate and participate in regular A&A status meetings with government and task order personnel to facilitate progress and address potential issues of RMF system efforts.

Participate in sessions aimed and identifying, planning, and executing strategies in response to emerging cybersecurity RMF policies.

Maintain industry awareness and knowledge of evolving security and risk management standards to include DOD, and customer policies, procedures and regulations and communicate and apply relevant changes to existing processes.

Ensure proper use of remote access connectivity from the customer to Background Investigations systems approved by the customer's CIO-T office, and maintained in accordance with NGA's policy and procedures.

Ensure File Transfer Protocol (FTP) connections from the customer to the Background Investigation system meets NGA and NIST requirements.

Ensure site to site Virtual Private Network (VPN) tunnels are established based on NGA and DOD requirements.

Ensure customer approved documentation of all interconnections with systems in the SIS footprint connected to customer infrastructures.

Conduct audits on computer systems to detect, prevent, and record computer use and abnormalities, Report to Information System Security Officer (ISSO) or Information System Security Manager (ISSM) any attempts by non-authorized users to access SIS systems and provide monthly logs to the customer.

Ensure data is being protected in accordance with NGA and DOD policies, standards, regulations, and procedures for the SIS specified systems.

Coordinate the use of multiple security countermeasures to protect the integrity of the information assets in SIS systems enterprise i.e. firewalls, access control, auditing etc. In accordance with accreditation standards using NIST's Intelligence Community Directive (ICD) 503

Develop, update, ensure security policy and procedures follow the accreditation standards using the NIST'S ICD 503, Risk Management Framework (RMF), and categorizing methods

Ensure the protection of the security system through implementation of security controls that protect against malicious behavior to include intrusion, tampering and virus detection

Ensure documentation of specific equipment restrictions, to include documentation on all interconnections required for all SIS systems

Ensure no personal computers, peripherals or other agencies computers, not authorized by customer CIOT, will be used across interconnection or on customer Networks

Qualifications

Skills and Experience Required:

Active TS/SCI is REQUIRED

Must be able to obtain a polygraph before starting employment

Bachelor's Degree or equivalent experience in a related field to security engineering

Minimum of 3-6 years of experience

Experience in assessing systems using NIST 800-53 and DISA STIGs and SRG

DOD 8070/8140 Compliant, CompTIA Security+ certified

Efficient with RMF Package development, including POAM (mitigation statements) Security plans, Risk assessment system/site policies, procedures and processes, architecture

Windows Operating systems

AWS Services

Desired:

Testing Security Test Cases for NIST 800-53 Security Controls

Nessus & DISA STIG Remediation

Troubleshooting system issues

Linux Operating systems

REQNUMBER: 2510545

SAIC is a premier technology integrator, solving our nation's most complex modernization and systems engineering challenges across the defense, space, federal civilian, and intelligence markets. Our robust portfolio of offerings includes high-end solutions in systems engineering and integration; enterprise IT, including cloud services; cyber; software; advanced analytics and simulation; and training. We are a team of 23,000 strong driven by mission, united purpose, and inspired by opportunity. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $6.5 billion. For more information, visit saic.com. For information on the benefits SAIC offers, see Working at SAIC. EOE AA M/F/Vet/Disability

SAIC

Go to Apply

Share this job

Similar Jobs

Information Technology /Assurance Specialist SME

Chenega Corporation • Arlington, VA • 2h ago

IT & Engineering

Req ID: 37967 Summary Information Technology/Assurance Specialist SME Arlington, VA Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where pr...

2h ago

Go to Apply

Senior Full Stack Developer - Azure/React/Node

Radiant Digital • Vienna, VA • 2h ago

IT & Engineering

Position: Full Stack Developer - Public Sector Systems Modernization Working Model : Remote Description: Education and Certifications: Education: Bachelor's degree in computer science, information technology, or a relate...

2h ago

Go to Apply

Software Developer - REMOTE

General Dynamics Information Technology • Fairfax, VA • 2h ago

IT & Engineering

Req ID: RQ208453 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: None Public Trust/Other Required: None Job Family: Software Engineering Skills: Node.js,Python (Programming Language),Ruby (Programmin...

2h ago

Go to Apply

Next Generation Desktop Environment (NGDE) Engineer - TS/SCI

General Dynamics Information Technology • Sterling, VA • 2h ago

IT & Engineering

Req ID: RQ208493 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: IT Infrastructure and Operations Skills: Linux Environments,S...

2h ago

Go to Apply

Data Scientist - Active TS/SCI Clearance Required

General Dynamics Information Technology • Washington, DC • 2h ago

IT & Engineering

Req ID: RQ208505 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: None Public Trust/Other Required: None Job Family: Data Science and Data Engineering Skills: Data Analysis,Data Analytics,Data Science...

2h ago

Go to Apply

Microsoft SQL DBaaS Engineer - TS/SCI

General Dynamics Information Technology • Sterling, VA • 2h ago

IT & Engineering

Req ID: RQ208496 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Software Engineering Skills: Database As A Service (DBaaS),Mi...

2h ago

Go to Apply

SharePoint Engineer (Back End) - TS/SCI

General Dynamics Information Technology • Sterling, VA • 2h ago

IT & Engineering

Req ID: RQ208494 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Software Engineering Skills: Back-End Development,Microsoft S...

2h ago

Go to Apply

SharePoint Developer (Front End)- TS/SCI

General Dynamics Information Technology • Sterling, VA • 2h ago

IT & Engineering

Req ID: RQ208492 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Software Engineering Skills: Microsoft SharePoint,System Desi...

2h ago

Go to Apply

Senior Azure Cloud Engineer

General Dynamics Information Technology • Fairfax, VA • 2h ago

IT & Engineering

Req ID: RQ208446 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: None Public Trust/Other Required: NACI (T1) Job Family: Software Engineering Skills: Cloud Computing,Linux,Microsoft Azure Administrat...

2h ago

Go to Apply

Full Stack Developer - Active TS/SCI Clearance Required

General Dynamics Information Technology • Washington, DC • 2h ago

IT & Engineering

Req ID: RQ208506 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: None Public Trust/Other Required: None Job Family: Software Engineering Skills: Cloud Development,Python (Programming Language),Softwa...

2h ago

Go to Apply

Subscribe to get new jobs sent directly to you
(no charge, cancel anytime)

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.