Auria
Information System Security Engineer
Auria, California, Missouri, United States, 65018
Auria is looking for an ON-SITE
Information System Security Engineer
who supports what used to be the Naval Satellite Operations Center (NAVSOC) and is now called the 10th Space Operations Squadron. Incumbent will perform computer and network security vulnerability assessments, create Assessment and Authorization (A&A) packages, and provide Authority to Operate (ATO) maintenance.The salary range for this role is $110,000 - $130,000 annually .Responsibilities:Develop and validate RMF packages to obtain an ATOLeading Assessment and Authorization (A&A) activities for DoD and Intelligence Systems in accordance with Risk Management Framework and ICD-503 guidelinesSupporting offensive architecture analysis and design of defense-in-depth solutionsDeveloping and assessing system security plans including, security concepts of operation, risk management matrix, security control traceability matrix, security test procedures, and plan of action and milestonesConducting and/or analyzing vulnerability assessments to validate system compliance with RMF controls and DISA Security Technical Information Guidelines (STIGS)Analyzing static code scans and dynamic code scans to validate Application Security and Development STIG complianceLeading and coordinating security test event teams to achieve accreditation milestonesVerifying and validating vulnerability resolutions and/or mitigationsEffectively communicate work plans, milestones (POAM), and obstacles to clients; able to communicate, explain, or defend ideas or information clearly. Listen to others and recognize potential miscommunications, offer clarity.Ability to effectively develop system security plans, procedures, and other security documentation.Resolve non-routine problems with area of assigned responsibility and timely direct complex problems, questions, or complaints to Program Manager.Ability to analyze disparate data and produce a readable, understandable summary to Program Manager, with recommendations for corrective action, as needed; evaluate effectiveness of applied security controlRequirements:Security+ or equivalent required (IAT II Minimum)Experience with traditional A&A tools: ACAS Nessus, Xacta, eMASS, SCAP Scanner, STIG ViewerMinimum 5 years of Accreditation experienceDemonstrated expertise in national Cybersecurity policies, DoD or Intelligence Community A&A processes and procedures and industry best practices on complex systemsExpertise in vulnerability assessment, control allocation and risk mitigationUnderstanding of offensive and defensive security tactics, techniques and proceduresStrong interpersonal skills and the ability to effectively build and lead teamsUS Citizenship is requiredActive security clearance required (Minimum Secret)Business travel to customer locations may be required (up to 25%)Preferred Requirements:Bachelor’s degree in related field (Computer Science, Information Technology, or Cybersecurity)RMF experience, Navy ship systems expertise is desiredExperience with cloud architectures is a plusAbout AuriaAuria is a provider of solutions and software in support of complex Space, National Security, and Cyber missions of federal, international, and commercial customers. Headquartered in Colorado Springs, CO and with operations in Boulder, CO, Washington, DC, Huntsville, AL, Albuquerque, NM, Ogden, UT, and San Diego, CA, our success is built on the excellence of diverse teams advancing innovative systems and operational software to strengthen our customers’ superiority in Space. With a distinguished track record and a spirit of relentless pursuit, we set the pace for progress and execute every mission with the utmost precision.Auria is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action-Employer, making decisions without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, marital status, national origin, age, veteran status, disability, or any other protected class.
#J-18808-Ljbffr
Information System Security Engineer
who supports what used to be the Naval Satellite Operations Center (NAVSOC) and is now called the 10th Space Operations Squadron. Incumbent will perform computer and network security vulnerability assessments, create Assessment and Authorization (A&A) packages, and provide Authority to Operate (ATO) maintenance.The salary range for this role is $110,000 - $130,000 annually .Responsibilities:Develop and validate RMF packages to obtain an ATOLeading Assessment and Authorization (A&A) activities for DoD and Intelligence Systems in accordance with Risk Management Framework and ICD-503 guidelinesSupporting offensive architecture analysis and design of defense-in-depth solutionsDeveloping and assessing system security plans including, security concepts of operation, risk management matrix, security control traceability matrix, security test procedures, and plan of action and milestonesConducting and/or analyzing vulnerability assessments to validate system compliance with RMF controls and DISA Security Technical Information Guidelines (STIGS)Analyzing static code scans and dynamic code scans to validate Application Security and Development STIG complianceLeading and coordinating security test event teams to achieve accreditation milestonesVerifying and validating vulnerability resolutions and/or mitigationsEffectively communicate work plans, milestones (POAM), and obstacles to clients; able to communicate, explain, or defend ideas or information clearly. Listen to others and recognize potential miscommunications, offer clarity.Ability to effectively develop system security plans, procedures, and other security documentation.Resolve non-routine problems with area of assigned responsibility and timely direct complex problems, questions, or complaints to Program Manager.Ability to analyze disparate data and produce a readable, understandable summary to Program Manager, with recommendations for corrective action, as needed; evaluate effectiveness of applied security controlRequirements:Security+ or equivalent required (IAT II Minimum)Experience with traditional A&A tools: ACAS Nessus, Xacta, eMASS, SCAP Scanner, STIG ViewerMinimum 5 years of Accreditation experienceDemonstrated expertise in national Cybersecurity policies, DoD or Intelligence Community A&A processes and procedures and industry best practices on complex systemsExpertise in vulnerability assessment, control allocation and risk mitigationUnderstanding of offensive and defensive security tactics, techniques and proceduresStrong interpersonal skills and the ability to effectively build and lead teamsUS Citizenship is requiredActive security clearance required (Minimum Secret)Business travel to customer locations may be required (up to 25%)Preferred Requirements:Bachelor’s degree in related field (Computer Science, Information Technology, or Cybersecurity)RMF experience, Navy ship systems expertise is desiredExperience with cloud architectures is a plusAbout AuriaAuria is a provider of solutions and software in support of complex Space, National Security, and Cyber missions of federal, international, and commercial customers. Headquartered in Colorado Springs, CO and with operations in Boulder, CO, Washington, DC, Huntsville, AL, Albuquerque, NM, Ogden, UT, and San Diego, CA, our success is built on the excellence of diverse teams advancing innovative systems and operational software to strengthen our customers’ superiority in Space. With a distinguished track record and a spirit of relentless pursuit, we set the pace for progress and execute every mission with the utmost precision.Auria is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action-Employer, making decisions without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, marital status, national origin, age, veteran status, disability, or any other protected class.
#J-18808-Ljbffr