Astrion
Principal Cybersecurity Engineer
Astrion, Lexington, Massachusetts, United States, 02173
Principal Cybersecurity EngineerJob Locations:
US-MA-Bedford / Hanscom AFB
Requisition Number:
2024-20019
# of Openings:
0
Category:
Cybersecurity
OverviewAstrion offers comprehensive services that boost preparedness, optimize performance, and ensure success across various domains, from Cyber to Digital, Mission and Systems, servicing our nation's Civilian, Defense and Space communities. We support customers with Centers of Excellence in Washington DC, Huntsville, AL and Burlington, MA with an additional 36 locations across the U.S.
Astrion has an exciting opportunity for a
Principal Cybersecurity Engineer
to provide Cybersecurity support to the Tactical Air Party - Modernization (TACPM) program in the Command & Control, Intelligence, Surveillance and Reconnaissance Division (C2ISR), which is within the PEO Digital Directorate, located at Hanscom AFB, MA.
Qualifications:
BS/BA and 15 years of relevant experience in respective technical/professional discipline being performed, 10 of which must be in DoD.
Demonstrated understanding of cybersecurity in DoD cloud infrastructure.
Demonstrated understanding of Agile methods, including CI/CD, DevSecOps, and DevOps.
Possess the ability to effectively communicate in both written and verbal forms on highly technical topics.
All applicants must be U.S. citizens and possess a Top Secret Security Clearance.
Responsibilities:
Assist with development of System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, Computer Certification and Accreditation, Security Vulnerability and Countermeasures Analyses, Security Concepts of Operations, and other system security engineering-related documents.
Support the system/application Authorization and Accreditation (A&A) effort to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and Air Force policies (i.e., Risk Management Framework (RMF)).
Update, monitor, and manage information in systems for the program office.
Process and manage system user account requests and process tools.
Process and manage system port/protocol and access control list requirements.
Process and manage system Public Key Infrastructure (PKI) identification and authorization requirements.
Manage the distribution, implementation, remediation, and tracking of system security updates and configurations as required by the DoD.
Recommend policies and procedures to ensure information systems reliability and accessibility to prevent and defend against unauthorized access to systems, networks, and data.
Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risk, and protection needs.
Promote awareness of security issues among management and ensure sound security principles are reflected in the organization’s vision and goals.
Conduct systems security evaluations, audits, and reviews.
Recommend systems security contingency plans and disaster recovery procedures.
Recommend and implement programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
Participate in network and systems design to ensure implementation of appropriate systems security policies.
Recommend initial, or updates to, software and configurations to new or existing system security mechanisms.
Obtain waivers to mandated security mechanisms/policies which would be detrimental to system performance and impact the system's mission.
Facilitate the gathering, analysis, and preservation of evidence used in the prosecution of computer-related crimes.
Provide leadership assistance in the analysis of the design, development, integration, implementation, and testing of cybersecurity requirements.
Develop risk-based strategies to address identified gaps.
Review, analyze, and assess implementations of cybersecurity (i.e. RMF security controls) throughout the open systems architecture and associated services.
Collaborate with stakeholders (Government and commercial) to ensure the system is approved by all Authorizing Officials via the RMF A&A process.
Provide technical advice in the area of systems security across all systems and supports.
Develop recommendations for the Government regarding how well designs satisfy current requirements and business goals.
Maintain databases that reflect receipt, storage, inventory, and disposition of classified information.
Support Government program office in audits of Government classified holdings to ensure proper accountability.
Maintain databases of classified visits and clearance levels.
Perform inspection, inventory, logging, storage, documentation, transmittal, and internal distribution of classified information received.
Evaluate Contractor classified data submittals for compliance with the appropriate System Security Classification Guide (SSCG).
Provide security inspection and protection to areas where classified information is being stored, and develop and establish security procedures and policies in accordance with DOD, USAF, AFMC, and local directives.
Develop training and provide security awareness and other security education programs.
Review and verify personnel qualifications for access to special access programs.
Develop, implement, and maintain a communications security program.
Assess program disclosure issues and provide FMS case management support.
Assist and advise FMS program office management and leadership in interfacing with FMS customers and all USG organizations.
Support execution of all aspects of acquisition program security throughout a program's lifecycle.
Assist with development of sound security practices and policies regarding acquisition, physical, personnel, and documentation security.
Update security classification guides.
Prepare acquisition security related sections of acquisition program documentation.
Review Contractor deliverables to ensure compliance with CDRLs.
Plan and implement security-related surveys, assessments, and studies.
Evaluate program security information and hardware throughout the program life cycle.
Provide security support to source selections.
What We Offer
Competitive salaries
Continuing education assistance
Professional development allotment
Multiple healthcare benefits packages
401K with employer matching
Paid time off (PTO) along with a federally recognized holiday schedule
Who We AreAt Astrion, we innovate, elevate, and shape the world of tomorrow. At our core is our purpose to "Be the Difference". This means we encourage our employees to take action and be the driving force for positive change. We foster an environment where innovative solutions flourish and our company continuously evolves.
We have a culture of care, empathy, and making a tangible difference within our organization and communities. We embrace continuous learning, growth, and innovation, and pushing the boundaries of what's possible. We promote collaboration and empowering our teams is at the core of our success.
Join Astrion and Be the Difference in your career and the world!
Astrion is an Equal Employment Opportunity/Affirmative Action Employer. We provide equal employment opportunities to all employees and applicants for employment and prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
#J-18808-Ljbffr
US-MA-Bedford / Hanscom AFB
Requisition Number:
2024-20019
# of Openings:
0
Category:
Cybersecurity
OverviewAstrion offers comprehensive services that boost preparedness, optimize performance, and ensure success across various domains, from Cyber to Digital, Mission and Systems, servicing our nation's Civilian, Defense and Space communities. We support customers with Centers of Excellence in Washington DC, Huntsville, AL and Burlington, MA with an additional 36 locations across the U.S.
Astrion has an exciting opportunity for a
Principal Cybersecurity Engineer
to provide Cybersecurity support to the Tactical Air Party - Modernization (TACPM) program in the Command & Control, Intelligence, Surveillance and Reconnaissance Division (C2ISR), which is within the PEO Digital Directorate, located at Hanscom AFB, MA.
Qualifications:
BS/BA and 15 years of relevant experience in respective technical/professional discipline being performed, 10 of which must be in DoD.
Demonstrated understanding of cybersecurity in DoD cloud infrastructure.
Demonstrated understanding of Agile methods, including CI/CD, DevSecOps, and DevOps.
Possess the ability to effectively communicate in both written and verbal forms on highly technical topics.
All applicants must be U.S. citizens and possess a Top Secret Security Clearance.
Responsibilities:
Assist with development of System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, Computer Certification and Accreditation, Security Vulnerability and Countermeasures Analyses, Security Concepts of Operations, and other system security engineering-related documents.
Support the system/application Authorization and Accreditation (A&A) effort to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and Air Force policies (i.e., Risk Management Framework (RMF)).
Update, monitor, and manage information in systems for the program office.
Process and manage system user account requests and process tools.
Process and manage system port/protocol and access control list requirements.
Process and manage system Public Key Infrastructure (PKI) identification and authorization requirements.
Manage the distribution, implementation, remediation, and tracking of system security updates and configurations as required by the DoD.
Recommend policies and procedures to ensure information systems reliability and accessibility to prevent and defend against unauthorized access to systems, networks, and data.
Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risk, and protection needs.
Promote awareness of security issues among management and ensure sound security principles are reflected in the organization’s vision and goals.
Conduct systems security evaluations, audits, and reviews.
Recommend systems security contingency plans and disaster recovery procedures.
Recommend and implement programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
Participate in network and systems design to ensure implementation of appropriate systems security policies.
Recommend initial, or updates to, software and configurations to new or existing system security mechanisms.
Obtain waivers to mandated security mechanisms/policies which would be detrimental to system performance and impact the system's mission.
Facilitate the gathering, analysis, and preservation of evidence used in the prosecution of computer-related crimes.
Provide leadership assistance in the analysis of the design, development, integration, implementation, and testing of cybersecurity requirements.
Develop risk-based strategies to address identified gaps.
Review, analyze, and assess implementations of cybersecurity (i.e. RMF security controls) throughout the open systems architecture and associated services.
Collaborate with stakeholders (Government and commercial) to ensure the system is approved by all Authorizing Officials via the RMF A&A process.
Provide technical advice in the area of systems security across all systems and supports.
Develop recommendations for the Government regarding how well designs satisfy current requirements and business goals.
Maintain databases that reflect receipt, storage, inventory, and disposition of classified information.
Support Government program office in audits of Government classified holdings to ensure proper accountability.
Maintain databases of classified visits and clearance levels.
Perform inspection, inventory, logging, storage, documentation, transmittal, and internal distribution of classified information received.
Evaluate Contractor classified data submittals for compliance with the appropriate System Security Classification Guide (SSCG).
Provide security inspection and protection to areas where classified information is being stored, and develop and establish security procedures and policies in accordance with DOD, USAF, AFMC, and local directives.
Develop training and provide security awareness and other security education programs.
Review and verify personnel qualifications for access to special access programs.
Develop, implement, and maintain a communications security program.
Assess program disclosure issues and provide FMS case management support.
Assist and advise FMS program office management and leadership in interfacing with FMS customers and all USG organizations.
Support execution of all aspects of acquisition program security throughout a program's lifecycle.
Assist with development of sound security practices and policies regarding acquisition, physical, personnel, and documentation security.
Update security classification guides.
Prepare acquisition security related sections of acquisition program documentation.
Review Contractor deliverables to ensure compliance with CDRLs.
Plan and implement security-related surveys, assessments, and studies.
Evaluate program security information and hardware throughout the program life cycle.
Provide security support to source selections.
What We Offer
Competitive salaries
Continuing education assistance
Professional development allotment
Multiple healthcare benefits packages
401K with employer matching
Paid time off (PTO) along with a federally recognized holiday schedule
Who We AreAt Astrion, we innovate, elevate, and shape the world of tomorrow. At our core is our purpose to "Be the Difference". This means we encourage our employees to take action and be the driving force for positive change. We foster an environment where innovative solutions flourish and our company continuously evolves.
We have a culture of care, empathy, and making a tangible difference within our organization and communities. We embrace continuous learning, growth, and innovation, and pushing the boundaries of what's possible. We promote collaboration and empowering our teams is at the core of our success.
Join Astrion and Be the Difference in your career and the world!
Astrion is an Equal Employment Opportunity/Affirmative Action Employer. We provide equal employment opportunities to all employees and applicants for employment and prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
#J-18808-Ljbffr