Journeyman Cybersecurity Engineer

Position Summary

Odyssey Systems has an exciting opportunity for a Journeyman Cybersecurity Engineer within our AFLCMC/HBG group. The C2ISR Division is responsible for a diverse portfolio that provides "cradle-to grave" support for the U-2 aircraft, E-8C Joint Surveillance Target Attack Radar System (JSTARS) aircraft, Air Force Distributed Common Ground System (AF DCGS), the Integrated Broadcast Service (IBS) system and other C2ISR programs as they transition to sustainment. The C2ISR Division provides worldwide life cycle support across the spectrum of the C2ISR capabilities based enterprise; including supply, distribution, materiel management, acquisition, system engineering and maintenance, financial planning and budgeting, security, flight test, and contracting functions. The Global Network Systems (GNS) Branch (AFLCMC/ HBGW), located at Hanscom AFB, MA, is one of the numerous branches within the C2ISR Division and reports directly to the C2ISR/HBG Senior Materiel Leader. EPASS support is required to execute the major GNS programs in support of the C2ISR Division, to include: AF DCGS Network Infrastructure Transformation (NIT), Extended Tether Program (ETP), and Global Command and Control System – Air Force Infrastructure (GCCS-AF (I)).

 

This is a full-time position located at Hanscom AFB, MA.

 

Responsibilities

Duties include, but not limited to:

• Assist with development of System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, Computer Certification and Accreditation, Security Vulnerability and Countermeasures Analyses, Security Concepts of Operations, and other system security engineering-related documents identified in MIL-STD 1785, DoDI 5000.02, Operation of the Adaptive Acquisition Framework, and DoDI 8510.01
• Support the system/application Authorization and Accreditation (A&A) effort to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and Air Force policies (i.e., Risk Management Framework (RMF)
• Update, monitor, and manage information in systems for the program office
• Process and manage system user account requests and process tools
• Process and manage system port/protocol and access control list requirements
• Process and manage  system  Public  Key  Infrastructure  (PKI)  identification  and authorization requirements
• Manage the distribution, implementation, remediation, and tracking of system security updates and configurations as required by the DoD
• Recommend  policies  and  procedures  to  ensure  information  systems  reliability  and accessibility to prevent and defend against unauthorized access to systems, networks, and data
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risk, and protection needs
• Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations’ vision and goals
• Conduct systems security evaluations, audits and reviews
• Recommend systems security contingency plans and disaster recovery procedures
• Recommend and implementing programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures
• Participate in network and systems design to ensure implementation of appropriate systems security policies
• Recommend initial, or updates to, software and configurations to new or existing system security mechanisms
• Obtain waivers to mandated security mechanisms/policies which would be detrimental to system performance and impact the system’s mission
• Facilitate the gathering, analysis and preservation of evidence used in the prosecution of computer
• Provide leadership assistance in the analysis of the design, development, integration, implementation and testing of cybersecurity requirements
• Develop risk-based strategies to address identified gaps
• Review,  analysize,  and  assess  implementations  of  cybersecurity  (i.e.  RMF  security controls) throughout the open systems architecture and associated services, derived requirements specifications, design documents & design implementation
• Collaborate with stakeholders (Government and commercial) to ensure the system is approved by all Authorizing Officials via the RMF A&A process
• Provide technical advice in the area of systems security across all systems and supports
• Develop recommendations for the Government regarding how well designs satisfy current requirements and business goals
• Maintain databases that reflect receipt, storage, inventory, and disposition of classified information to include data entry, updat