Information Assurance Engineer

Description

E&M Technologies, Inc. is currently seeking an Information Assurance Engineer to join our team in Charlottesville, VA in support of the National Ground Intelligence Center (NGIC). NGIC is the Defense Department’s primary producer of ground forces intelligence. NGIC produces scientific and technical intelligence and military capabilities analysis on foreign ground forces required by warfighting commanders, the force modernization and research and development communities, Department of Defense, and national policymakers.

Job Responsibilities:

• Actively work to improve the security posture of the organization through the proper implementation and effectiveness of technical security controls.
• Work with the Cybersecurity Office and stakeholders to define and implement the overall Assessment and Authorization (A&A) strategy and produce a resulting cybersecurity policy outlining said strategy for Government review and approval.
• Create and maintain extensive A&A Body of Evidence (BOE) documentation to include enterprise System Security Authorization Agreement, Plan of Actions and Milestones (POA&M), waiver and exception documentation while ensuring the technical accuracy of all specified BOEs.
• Conducts analysis, evaluation, or design of unique and complex tasks through the development of new or improved methods and procedures.
• Assess existing cybersecurity systems and protocols and design and implement upgrades to existing measures as well as implementing new procedures.
• Conduct risk-assessments of existing network hardware and information delivery systems to prevent and mitigate risk.
• Perform assessments of systems and networks within the networking environment or enclave and identify where those systems and networks deviate from acceptable configurations, enclave policy, or local policy.
• Assist in the implementation of the required government policy, make recommendations on process tailoring, participate in and document process activities.
• Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Document the results of A&A activities and prepare the system Security Plans and update the POA&M.
• Periodically conduct a complete review of each system's audits and monitor corrective actions until all actions are closed.

Requirements

Minimum Qualifications:

• DOD 8140 (8570) IAM or IAT Level II Certification.
• At least eight years of experience in a cyber security field.
• Minimum of five years' experience with, and expert knowledge of, Enterprise Mission Assurance Support Service (eMASS).
• Experience with authorizations of large enclave networks and stand-alone systems using the Risk Management Framework (RMF).
• Familiarity with DoD and Army Cybersecurity policies and instructions.
• Proven knowledge and experience working with NIST 800-37, NIST 800-53, CNSSI 1253, and ICD-503.
• Familiarity with DISA Security Technical Implementation Guides (STIGs) and the Information Assurance Vulnerability Management (IAVM) program.
• Proven ability to participate in the analysis of IT and business issues.
• Demonstrate ability to be innovative and work independently and collaboratively across multiple functional areas.
• Experience participating in and effectively contributing to a highly collaborative team environment.
• Must be a U.S. Citizen.
• Must have and be capable of maintaining a U.S. Department of Defense (DoD) TS/SCI security clearance.

Preferred Qualifications:

• Bachelor of Science degree in Engineering, Computer Science, or related field.
• Experience may be substituted for degree.
• Current eMASS certification.
• Familiarity with Zero Trust implementation/concepts.
• Experience with cloud-based systems.

To Apply for this Position:

You must have the Minimum Qualifications in your resume to be selected as a candidate.