Systems Security Engineer III

Are you looking for an opportunity to deepen your IT skills in a meaningful work environment that supports and protects explorers and heroes? Join our team! As a Systems Security Engineer III, you will be using your skills and expertise to design, test, and implement our secure operating systems, networks, security monitoring, and tuning. You'll be responsible for the management of our IT security systems and applications, incident response, digital forensics, loss prevention, and eDiscovery actions, conducting risk and vulnerability assessments, and developing and implementing security controls. You'll research, evaluate, and recommend new security tools, techniques, and technologies in alignment with our IT security strategy and introduce them to the enterprise.

As SNC's corporate team, we provide the company and its business areas with strategic direction and business support spanning executive management, finance and accounting, operations, human resources, legal, IT, information security, facilities, marketing, and communications. Learn more about SNC's Corporate team

PRIMARY RESPONSIBILITIES INCLUDE:

• Perform System Security Engineering (SSE) and Cybersecurity/IA efforts by establishing or validating the system boundary in describing the IS, its functions, information types operating environments, and security requirements
• Provide input to and/or generate the A&A/RMF documentation: Security Plan, Plan of Action & Milestones (POA&M), Software/Hardware Inventory, Network diagrams, INFOSEC Policies and Procedures, Risk Assessment Report, Security Assessment Plan and Report; Contingency Plan, Incident Response Plan, and Configuration Management
• Capture and refine cybersecurity requirements and ensure that the requirements are effectively integrated into information systems throughout the System Development Life Cycle (SDLC)
• Employ best practices when implementing security requirements within systems including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques
• Conduct security control assessments; review the adequacy of the security controls and their ability to protect the system and its information; tailor the security controls to ensure compliance
• Coordinate the system security related activities with ISO’s, ISSM’s and CCP’s
• Represent IA in the configuration management process; provide guidance in any acquisition/development activities that impact system security
• Plan and conduct annual and/or ad hoc vulnerability scanning and security control assessments at customer sites to ensure compliance with Authorizing Official requirements (Continuous monitoring)
• Implement Cybersecurity/IA regulations and requirements; maintain technical Cybersecurity/IA skillset
• Periodic travel to SNC, customer and partner facilities in support of programs

ADDITIONAL RESPONSIBILITIES INCLUDE:

• Follow SNC policies, procedures and work instructions for all technical activities
• Punctuality to work each day and prepared to work scheduled work hours
• Other duties as assigned

COMPLIANCE RESPONSIBILITIES:

• Responsible for thoughtful adherence to all SNC Policies, Procedures, and Compliance regulations (internal and external)

Must-haves:

• Requires a BS in related field *Relevant work experience as a Network Analyst/Administrator/Engineer, Systems Analyst/Administrator/Engineer, IT Analyst/Administrator, Software Engineer etc… may substitute for required education.
• 7+ years related experience.
• DoDD 8140 IAT Level II *Required within 6 months of hire.
• Cisco, Microsoft, Linux, Dell, or other technical certifications a plus
• Knowledge of NIST 800-53 Security and Privacy Controls
• Experience in supporting Information Technology (IT) within a classified environment
• Knowledge of technical standards relating to systems security; experience administering UNIX, Linux, and Windows operating systems, experience with large-scale server systems, thin client architecture, system virtualization and other related peripherals
• Thorough understanding of US Government Cybersecurity policies
• Strong communication skills, strong critical thinking and problem solving skills; self-motivated with ability to effectively prioritize multiple projects; ability to work with people in a team environment and deal effectively with changing project priorities
• Ability to manage time, make sound decisions, take independent action, analyze problems and provide focused solutions