Information Systems Security Engineer - Keyport, WA

Responsibilities

Experienced with frequent use and application of technical standards, principles and theories. Works under general supervision, providing solutions to technical problems of moderate scope/complexity. Provides technical and programmatic Information Assurance Services to internal and external customers in support of network and information security systems.

Designs, develops and implements security requirements within an organization’s business processes. Prepares documentation from information obtained from customer using accepted guidelines such as DITSCAP (DoD Information Technology Security Certification and Accreditation Process). Prepares Security Test and Evaluation plans.

Provides certification and accreditation support in the development of security and contingency plans and conducts complex risk and vulnerability assessments. Analyzes policies and procedures against Federal laws and regulations and provides recommendations for closing gaps. Develops and completes system security plans and contingency plans.

Recommends system enhancements to improve security deficiencies. Develops, tests and integrates computer and network security tools. Secures system configurations and installs security tools, scans systems in order to determine compliancy and report results and evaluates products and various aspects of system administration.

Conducts security program audits and develops solutions to lessen identified risks. Develops strategies to comply with privacy, risk management, and e-authentication requirements. Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.

Evaluates, develops and enhances security requirements, policy and tools. Provides assistance in computer incident investigations. Performs vulnerability assessments including development of risk mitigation strategies. Requires a Bachelors degree and eight to ten years of related experience performing a wide variety of information assurance and information systems security engineering duties, to include the certification and accreditation of information systems using DIACAP (formerly DITSCAP), NIACAP, NIST SP 800-37, and/or DCID 6/3 frameworks.

Specific Responsibilities: Support of Assessment and Authorization (A&A) and Continuous Monitoring activities ensuring compliance with Risk Management Framework (RMF) requirements across multi-level classification environments with diverse technologies and services. Update System Security Plans, Boundary Diagrams, and hardware/software lists in the Enterprise Mission Assurance Support Service (eMASS).

Run weekly Assured Compliance Assessment Solution (ACAS) scans and use the Security Content Automation Protocol (SCAP) Compliance Checker (SSC) to ensure Defense Information Systems Agnecy (DISA) Security Technical Implementation Guide (STIG) Compliance. Track vulnerabilities, document mitigation statements, and update Plan of Action & Milestones (POA&M) to ensure continued compliance.

Provide coordination between engineering teams and Information Systems Security Manager (ISSM) to ensure Authority to Operate (ATO) packages are complete, accurate and ready for submission.

Qualifications

BS 2-4 Years, MS 0-2 or HS 8-10 COMPTIA SEC+ Certification Possess and Maintain a SECRET Security Clearance Familiarity with, and experience using, eMASS, ACAS, SSC Knowledge of, and experience with, Navy A&A/RMF Process Equal Pay Act This is the projected compensation range for this position. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories.

In addition, Arcfield invests in its employees beyond just compensation. Arcfield ’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long-Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.

Min: $70,123.69 Max: $121,931.49 EEO Statement We are an equal opportunity employer and federal government contractor. We do not discriminate against any employee or applicant for employment as protected by law. Experienced with frequent use and application of technical standards, principles and theories. Works under general supervision, providing solutions to technical problems of moderate scope/complexity.

Provides technical and programmatic Information Assurance Services to internal and external customers in support of network and information security systems. Designs, develops and implements security requirements within an organization’s business processes. Prepares documentation from information obtained from customer using accepted guidelines such as DITSCAP (DoD Information Technology Security Certification and Accreditation Process).

Prepares Security Test and Evaluation plans. Provides certification and accreditation support in the development of security and contingency plans and conducts complex risk and vulnerability assessments. Analyzes policies and procedures against Federal laws and regulations and provides recommendations for closing gaps.

Develops and completes system security plans and contingency plans. Recommends system enhancements to improve security deficiencies. Develops, tests and integrates computer and network security tools. Secures system configurations and installs security tools, scans systems in order to determine compliancy and report results and evaluates products and various aspects of system administration.

Conducts security program audits and develops solutions to lessen identified risks. Develops strategies to comply with privacy, risk management, and e-authentication requirements. Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.

Evaluates, develops and enhances security requirements, policy and tools. Provides assistance in computer incident investigations. Performs vulnerability assessments including development of risk mitigation strategies. Requires a Bachelors degree and eight to ten years of related experience performing a wide variety of information assurance and information systems security engineering duties, to include the certification and accreditation of information systems using DIACAP (formerly DITSCAP), NIACAP, NIST SP 800-37, and/or DCID 6/3 frameworks.

Specific Responsibilities: Support of Assessment and Authorization (A&A) and Continuous Monitoring activities ensuring compliance with Risk Management Framework (RMF) requirements across multi-level classification environments with diverse technologies and services. Update System Security Plans, Boundary Diagrams, and hardware/software lists in the Enterprise Mission Assurance Support Service (eMASS).

Run weekly Assured Compliance Assessment Solution (ACAS) scans and use the Security Content Automation Protocol (SCAP) Compliance Checker (SSC) to ensure Defense Information Systems Agnecy (DISA) Security Technical Implementation Guide (STIG) Compliance. Track vulnerabilities, document mitigation statements, and update Plan of Action & Milestones (POA&M) to ensure continued compliance.

Provide coordination between engineering teams and Information Systems Security Manager (ISSM) to ensure Authority to Operate (ATO) packages are complete, accurate and ready for submission. BS 2-4 Years, MS 0-2 or HS 8-10 COMPTIA SEC+ Certification Possess and Maintain a SECRET Security Clearance Familiarity with, and experience using, eMASS, ACAS, SSC Knowledge of, and experience with, Navy A&A/RMF Process