Senior Information Assurance Engineer (TS/SCI Required)

Intelligent. Dynamic. Resilient. 

Everfox, formerly Forcepoint Federal, has been defending the world’s most critical data and networks against the most complex cyber threats imaginable for more than 25 years. As trailblazers in defense-grade, high assurance cyber security, we have been leading the way in developing and delivering innovative cyber security technology. We protect data wherever it resides. Our unwavering dedication and commitment to our customers and the critical missions they serve are what set us apart. We are dynamic, vigilant, and proactive in everything we do. Our suite of cross domain, threat protection and insider risk solutions empower governments and enterprise organizations to use data safely - where and however their people need it. At Everfox, we innovate, we invest, we achieve. We protect what matters most to our customers. And we offer protection like no other. We do all of this so our customers can focus on what matters most… their mission.

Job Title: Senior Information Assurance Engineer

Primary Work Location*: San Antonio, Texas

Position Summary:
Everfox is one of the world’s most significant private cybersecurity software and professional service companies. As a Principal Information Assurance Engineer at Everfox, you’ll join our growing professional services engineering team. The work is challenging and provides support to a single customer. Supporting this customer will require you to troubleshoot and resolve various issues independently. While you’ll have access to other engineering staff, you’ll be expected to be a self-starter and multitask while communicating effectively with the customer and Everfox management. The ideal candidate will have hands-on experience providing administrator or SME-level support for endpoint security solutions, such as HBSS, Tanium, Digital Guardian, etc. 

What You'll be Doing: 
Many job listings provide a wide range of confusing and often vague terms. At Everfox, we take a different approach by spelling out the key things you’ll be responsible for.

• Validates and verifies system security requirements definitions and analysis and establishes system security designs for controls.

• Designs, develops, implements, and/or integrates IA and security systems and system components for networking, computing, virtualization, cloud, and enclave environments to include those with multiple enclaves and differing data protection/classification requirements.

• Builds IA into systems and services deploying into operational environments at multiple classification levels.

• Assists architects and services developers in identifying and implementing appropriate information security controls and potential security functionality to ensure uniform application of security policy and enterprise solutions.

• Enforces the design and implementation of trusted interfaces among external systems and architectures.

• Assesses and mitigates system security threats/risks throughout the program life cycle.

• Contributes to the security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.

• Creates and reviews A&A Body of Evidence documentation, providing feedback on the completeness and compliance of its content. Develops and executes Security Test Plan (STP) closely with team members.

• Possibility of 25% or less travel to customer locations when needed.

• Other duties as assigned.

Things You Must Have to Apply: 

• An active (currently in use) – TS with SCI or SCI eligibility within two years from last use.

• A bachelor’s degree in computer science, Information Systems, Cyber Security, or equivalent education and work experience.

• At least one DoD 8140 Cyber Workforce Qualification Program certification, at IAT level II (2) or higher.

• The ability to obtain the appropriate work authorizations required under U.S. ITAR or EAR regulations from the applicable U.S. government agency.

• 8+ years’ experience in Information Assurance positions performing the following tasks:

  • Reviewing, applying, and remediating security vulnerabilities or implementing security controls based on STIG guidance or scanning reports.

  • SME-level knowledge of NIST compliance

  • SME-level knowledge of working through A&A efforts leading to obtaining an ATO. Experience working with customers or stakeholders within an organization to achieve.

• 8+ years’ experience in the following technical skills:

  • Expe