Security Engineer

Synergy Business Innovation & Solutions is a premier implementer of cutting-edge software solutions. Synergy brings the experience and expertise necessary to deliver capability that provides tangible ROI to our customers. Synergy’s core areas of expertise are in the fields of Digital Transformation, Cloud Solutions, SaaS and Low-Code/No-Code solutions, Emerging Technologies, Data analytics and Visualization, Information Assurance, and Business Process Re-Engineering.

Synergy offers its employees a generous portfolio of core and voluntary benefits including group medical, dental, and vision insurance, HSA, FSA, 401(k) with immediately vested company match, PTO/Sick Leave, 11 paid federal holidays, company paid life, short-term and long-term disability insurance, tuition and training reimbursement, fitness/wellness reimbursement, a referral bonus program, and life management programs.

At Synergy, you’ll be challenged and given the opportunity to grow in your career path. In fact, growth is such a big deal to us that you will have dedicated career coaches available for every employee, company-funded certification opportunities, education reimbursement, and a general open-door policy so that you have support when you need it. Our team is eager to learn, fast-paced, and quality-driven—if that sounds like you, Synergy has a position for you!

This position is currently designated as work-from-home, discuss future requirements with your recruiter.

Description:

• Provides support to plan, coordinate, and implement the organization’s information security in a DoW RMF environment, supporting low code application platforms. 
• Provides support for facilitating and helping agencies identify their current security infrastructure and define future programs, design and implementation of security related to IT systems.
• Oversees the efforts of the contractor security staff to design, develop, engineer and implement solutions to security requirements.
• Responsible for the implementation and development of the DHS IT security.
• Gathers and organizes technical information about an organization's mission goals and needs, existing security products, and ongoing programs in the MLS arena.
• Performs risk analyses which also includes risk assessment.
• Provides support to plan, coordinate, and implement the organization’s information security.
• Provides support for facilitating and helping agencies identify their current security infrastructure and define future programs, design and implementation of security related to IT systems.
• A working knowledge of several of the following areas is required:
  • Understanding of business security practices and procedures;
  • Knowledge of current security tools available;
  • Hardware/Software security implementation;
  • Different communication protocols;
  • Encryption techniques/tools;
  • Familiarity with commercial products, and current Internet/EC technology.
• Provides daily supervision and direction to staff.

• Provide support to plan, coordinate, and implement the organization’s information security.
• Conduct security compliance verification and assessment.
• Understand and interpret different security controls.
• Review application architecture and technology stack including COTS and GOTS platforms to assess security vulnerabilities
• Assess application security compliance with DoD STIG and IAVA standards
• Conduct security map and gap analysis
• Provide security finding assessment report, resolution implementation plan, and level of effort.
• Identify and propose security finding remediation solutions.
• Perform risk analyses which also includes risk assessment.
• Complete pertinent security and information assurance documentation.

• Understanding of DoD system security accreditation process and DISA STIGs.
• Understanding of CCRI Audit and CGCYBER OPORD policies.
• Computer Science, Information Security, System Engineer or other technical Master's Degree
• ISC2 CGRC Certified Governance Risk and Compliance
• Must meet position and certification requirements outlined in DoD Directive 8570.01-M for IAT Level II 
• At least 6 years of experience working as Security or IA Analyst supporting the DoD or other federal agencies.
• Detail-oriented individual
• Experience creating security implementation plans and schedules.
• Experience creating and managing POA&Ms that address security compliance issues.
• Experience creating security finding assessment report and remediation solution proposal.
• Understanding of web application firewall enforcement.
• Understanding of P