Information Systems Cyber Security Engineer Jobs

Location of Work:      

Off-Site but personnel shall be available to periodically support meetings at HQ DLA (Fort Belvoir, VA) or other places of performance in the Washington, DC metropolitan area

Remote, Hybrid, Onsite:       

Remote with possible travel to Richmond, VA, New Cumberland, PA, and/or Harrisburg, PA

Position Description Summary:       

The Cybersecurity Engineer will provide Information Assurance and cybersecurity engineering support for DLA information systems, cloud environments, operational technology, and IT infrastructure. The position will assess cybersecurity compliance, perform security testing and risk assessments, evaluate vulnerabilities, and provide technical recommendations to improve DLA’s cybersecurity posture and protect the confidentiality, integrity, and availability of its systems. Also, the Cybersecurity Engineer will provide Information Assurance Engineering Support for DLA Information Technology R&D program which executes programs and projects for all DLA participating in programs in the Defense Industrial Base Manufacturing and Small Business Innovation Research. The Cybersecurity Engineer shall provide analysis of emerging DLA R&D Information Systems, R&D OT, and R&D IT Infrastructure to assess compliance with DLA, DoD and Federal Information Assurance policy, and/or regulation to reduce time, effort and total cost of acquisition for R&D projects migrating to production DoW systems.

Responsibilities:        

•         Analyze existing and emerging DLA information systems, cloud environments, operational technology, and IT infrastructure for compliance with DLA, DoW, NIST, and Federal cybersecurity requirements

•         Analyze emerging DLA R&D information systems, operational technology, cloud environments, and IT infrastructure for cybersecurity compliance

•         Assess the impact of proposed DoD policies on DLA R&D cloud, operational technology, IT, and cybersecurity architecture

•         Review system design documentation against existing, proposed, and draft cybersecurity policies to identify areas of noncompliance

•         The position will evaluate emerging R&D systems for compliance with DLA, DoW, and Federal cybersecurity requirements, conduct cybersecurity assessments and risk evaluations, and support the secure transition of R&D projects into production DoD environments.

•         Conduct or support Security Test and Evaluation activities and cybersecurity assessment reviews

•         Assess the impact of proposed DoW policies on DLA cloud, operational technology, IT, and cybersecurity architecture

•         Develop cybersecurity standards, implementation guides, system security designs, and assessment documentation

•         Conduct and document risk assessments for classified and unclassified systems

•         Evaluate the probability and impact of identified risks and recommend safeguards, remediation actions, and mitigation strategies

•         Use open-source and classified vulnerability and threat-intelligence resources to support risk-based evaluations

•         Prepare IA and cybersecurity assessment reports, ISSE designs, risk assessments, decision recommendations, standard operating procedures, and supporting documentation

•         Provide weekly status updates for open assignments, tickets, and projects

•         Maintain appropriate access to NIPRNet and SIPRNet environments and properly mark, store, and transmit classified risk-assessment information

•         Handle COMSEC material in accordance with DoW and DLA policies and complete required COMSEC training when necessary

Skills & Experience:  

•         Minimum of ten years of relevant information technology experience

•         Minimum of seven years of relevant operational technology experience

•         Experience analyzing cybersecurity and information assurance requirements

•         Experience evaluating cloud, operational technology, IT, and R&D system architecture

•         Knowledge of DoW Small Business Innovation Research Programs

•         Experience providing security engineering support for the planning, design, development, testing, demonstration, and integration of information systems

•         Knowledge of cybersecurity risk assessment, vulnerability remediation, security testing, system security design, and compliance assessment methodologies

•         Familiarity with DLA, DoW, NIST, and Federal cybersecurity policies and standards

•         Relevant DoW 8570/8140 certification meeting IAT Level III requirements

•         IASAE Level III certification, or ability to obtain the certification within six months of beginning work

•         Applicable computing environment certification, such as:

·       Microsoft Certified Solutions Associate

·       Microsoft Certified Solutions Expert

·       Cisco Certified Network Administrator

·       Microsoft Azure Security Technologies certification

·       Amazon Web Services security certification

Education:      

•         A bachelor’s degree is preferred (in computer science, information technology, information systems, engineering, or a related technical discipline).

•         Relevant certification from a nationally recognized technical authority, as the candidate must possess the required experience, technical competencies, and professional certifications.

Security Clearance Required:           

Must possess a current favorable Moderate Risk, Confidential, Non-Critical Sensitive Tier 3 investigation, formerly identified as NACLC or ANACI, at the time of proposal submission.

Tuba Group is a small federal contracting business and a CMMI® Level 3 Rated, ISO9001:2015 certified organization. with a primary focus in accounting, financial, systems, technical, engineering, administrative, management, and subject matter expertise. Our mission is to provide value-added solutions that contribute to the success of government agencies, small businesses and independent professionals by leveraging the skill and talent our most valuable resources - our people.