Information Assurance Security Engineer

Information Assurance Security Engineer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

CACI is seeking a Information Assurance Security Engineer (Senior) to join our team to support our intelligence customer in Springfield, VA/Arnold, MO. As a team, we will be responsible for developing and maintaining agency wide Platform as a Service (PaaS) capabilities deployed across multiple security domains utilizing Agile scrum methodologies. Tailoring cutting-edge solutions to unique requirements of our clients, we will support multiple tenants deploy a myriad of application stacks and data services. Be a part of something greater than yourself and make a lasting impact at CACI.

Responsibilities:

• Responsible for writing information security policy drafts, writing and reviewing Memorandum of Agreements and coordinating and managing all aspects of the Certification and Accreditation.
• Advise and assess system design/architecture as well as defining, designing and evaluating information security systems.
• Manage multi-agency information sharing and integration security. Maintain affiliations with high-level personnel at multiple agencies and organizations involved in Information Security.
• Tasking includes incident response, system access approval, audit log review, Configuration Control Board and daily consultations/consulting on a wide variety of security issues.
• Report, document and investigate all security related incidents; assist with development and implementation of corrective measures.

Qualifications:

• Bachelors Degree in Computer Science or a related technical discipline, or the equivalent combination of education, professional training or work experience.​.
• 10-15 years of related experience in data security administration.
• TS/SCI clearance w/ CI Poly
• Must have knowledge of and experience with ICD 503 and be familiar with Cloud Infrastructure/AWS-based solutions.
• Must possess IAM II certification to start in accordance with DOD 8570.1M. This position is defined as in 8570.1M chapter 4, pg 35. Candidate is required to understand how our customer's RMF process work and how systems security requirements will be met.
• Will work with all IT groups to build IT systems with security planned from the start. Work with developers, system engineers, project managers, and users to identify the level of protection systems will need. Understand and be able to identify what group or process will satisfy security requirement.
• Act as the representative of the Information System Security Manager ensuring compliance with IS security procedures and Support efforts to operate, maintain, and dispose of information system materials in accordance with security directives, policies and practices and as annotated in Systems Security Plans.
• Generate and implementation of requisite security training ensuring user security awareness of responsibilities prior to system access and Initiate protective and corrective measures when incident or vulnerabilities are discovered.
• Ensure IA hardware and software complies with security configuration guides and Implement and enforce IA policies and procedures as defined by A&A documentation.
• •Ensure users are aware of their IA responsibilities and The ability to work on multiple projects/tasks at once and operate in a dynamic, fast-paced, team-oriented environment.
• Perform Operations & Sustainment (O&S) functions for the NCE network security infrastructure (firewalls, web gateways, mail gateways, ids, load balancers, performance monitoring tools, mgt systems, etc)
• Perform maintenance and/or advanced configuration of equipment in order to protect the network from emerging cyber threats
• Experience with Cloud Infrastructure/AWS-based technology and Experience using security tools such as ACAS, HBSS, Carbon Black, Tanium, RedSeal, and EMET
• Conduct forensic traffic/log analysis to isolate issues or respond to analyst alerts and Respond to escalated troubleshooting requests.
• Maintain and administer network infrastructure standards, documentation and fault tolerance and Present Monitoring/Test Results and Reports as required
• Perform/support integration testing as required and Participates in special projects as required.
• Ability to review Plan of Action and Milestones (POA&Ms) and conduct a technical decomposition categorization, remediation, and lien resolution
• Execute remediation process to implement technical solutions to ad