Cyber Security Engineer/ ISSO - VAE INC
Fort Belvoir, VA 22060
About the Job
- Provide Cyber security support for all efforts/projects.
- Research most current DoD/Army Cyber security (CS) policies, regulations, guidance, and Operations/Task Orders to ensure they are adhered to within projects.
- Brief Leadership on current cyber security status and the cyber responsibilities within the project during Kick-Off meetings.
- Act as the primary Army Training and Certification Tracking System (ATCTS) Unit Manager
- Process all (civilian, contractors) System Authorization Access Request (SAAR/DD2875).
- Collaborate and coordinate with the Organization’s Personnel Security, Information Management Officer (IMO) and Operations to ensure in processing personnel has access to the network as soon as possible.
- Ensure all personnel maintain the appropriate training and certification annually.
- Process quarterly ATCTS reports for privilege users for the Belvoir RNEC and C3T approval.
- Train others to process DD2875, created and disseminated procedures as guidance.
- Attend and participate in Weekly Project Review (WPR) meetings to address cyber security concerns/issues, to provide cyber security guidance and to ensure Cyber security is continuously implemented timely and appropriately throughout the project.
- Review and provide input into the systems documentation (System Requirement Documentation (SRD), Performance Work Statements (PWS), Statement of Works (SOW), Implementation Plans, etc.) to ensure compliance with the DoD Risk Management Framework (RMF) process.
- Review and provide comments to Army, and DoD suspense and staff actions.
- Create Risk Acceptance Memos, POAMs, Contract Deliverables (CDRLs) for Cyber Task, Cybersecurity Briefing slides etc.
- Collaborate with Technical POCs to discuss Hardware/Software (HW/SW) that has been recommended by the integrator to validate it is compliant, current, and not nearing end of life or end of support.
- Ensure system is being configured IAW DoD and DISA STIGs and DODIN APL and meets RMF requirements.
- Research STIGs, patches and IAVAs for deployed HW/SW to validate that the most current is being applied by the integrator and system is hardened during installation and throughout the project and also to verify system readiness for assessment before network connection.
- Continuously review of DODIN APL and DISA STIGs throughout the project to verify new versions and releases are being implemented.
- Review integrator system design packages (Critical Design Review (CDR), Preliminary Design Review (PDR)), to include diagram/topology to validate HW/SW is implemented IAW written documentation.
- Research vendor’s (i.e., CISCO, AVAYA) recommended new patches to gain knowledge of the security implications if added to the project system deployments.
- Train Assistant Project Managers (APMs) and new Cyber personnel on the Cyber support process.
- Train Cyber personnel on how to access and use eMASS, RMF Knowledge Service, DODIN APL and DISA STIG sites to obtain information to enhance support for projects.
- Assist in developing Cyber activities template for the APMs for their project’s Integrated Master Scheduler (IMS) and ensure the activities are performed in a timely matter to avoid project delays.
- Review integrator provided configuration documents, topology, and diagrams to ensure devices are implemented appropriately, STIG availability and Hardware/Software is on the DODIN APL.
- Review Cybersecurity Assessment reports before they are submitted
- Active Secret clearance required
- 7+ years of relevant experience preferred
- Ability to work on-site in Ft Belvoir on Tuesdays and Thursdays
Source : VAE INC