Information Assurance / Security Engineer

The Information Assurance / Security Engineer ensures the confidentiality, integrity, and availability of identified mission supporting information systems and applications, their networks, data and tools. Establishes and satisfies complex system-wide information security requirements based upon the analysis of user, policy, regulatory, and resource demands.

The position will support Joint Staff J-8 team at the Pentagon.
• Plans, analyzes, develops, implements, maintains, and enhances the programs, policies, procedures, and tools necessary to provide information assurance in both the unclassified and classified environments, and ensure the operational availability of all systems.
• Coordinates with the Designated Approval Authority to maintain each system's Authority to Operate (ATO).
• Ensures compliance with all other applicable Department of Defense (DoD), Defense Information Services Agency (DISA), U.S. Cyber Command, National Institute of Standards and Technology (NIST), and JS guidance; maintains an in depth understanding of the Risk Management Framework (RMF), Information Assurance Work Force standards (IAWF), Security Technical Implementation Guides (STIG), and continuous monitoring standards from NIST SP-800.
• Documents and mitigates deviations from policy.
• Develop certification and accreditation packages in accordance with RMF and Joint Staff policies.
• Complete security reviews as often as required to maintain a valid ATO for all J-8 mission supporting systems.
• Performs vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle.
• Analyzes general information assurance-related technical problems and provides basic engineering and technical support in solving these problems.
• Provides support for data recovery operations.

• Bachelor's degree in computer science, information system, a physical science, engineering or a mathematics-intensive discipline, plus at least five (5) years of information security or information assurance experience; OR associate's degree in computer science, information system, a physical science, engineering or a mathematics-intensive discipline, plus ten (10) years task related experience.
• In depth understanding of:
  • the Risk Management Framework (RMF)
  • Information Assurance Work Force standards (IAWF)
  • Security Technical Implementation Guides (STIG)
  • and continuous monitoring standards from NIST SP-800
• Certified in compliance with DoDD 8570.01m as an IAM level 3 -CISSP -Security+