Senior Information Assurance Engineer - Chenega Corporation

Overview

Senior Information Assurance Engineer

Hybrid Schedule: In person, in the Washington, DC office twice a pay period.

The Senior Information Assurance Engineer is responsible for the design, development, testing, and evaluation of information systems throughout the systems development life cycle.

Responsibilities

• Collaborate on cybersecurity designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations, high integrity and availability requirements).
• Design hardware, operating systems, and software applications to adequately address requirements.
• Develop detailed design documentation for component and interface specifications to support system design and development.
• Ensure design and development activities are properly documented (providing a functional description of implementation) and updated as necessary.
• Implement designs for new or existing system(s).
• Other duties as assigned.

Qualifications

• BS degree in Cybersecurity or a related discipline
• 8+ years of experience designing, building, testing, and implementing security systems within an organization's IT Network
• ISC(2) CISSP, ISC(2) CCSP, EC-Council CEH or equivelant certification
• Background check

Knowledge, Skills, and Abilities:

• Knowledge of the organization's enterprise information security architecture. (K0027)
• Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, and non-repudiation). (K0044)
• Knowledge of information security systems engineering principles (NIST SP 800-160).
• Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• Knowledge of the organization's evaluation and validation requirements.
• Knowledge of systems testing and evaluation methods.
• Knowledge of various types of computer architectures.
• Knowledge of secure configuration management techniques. (e.g., Security Technical Implementation Guides (STIGs), cybersecurity best practices).
• Knowledge of software development models (e.g., Waterfall Model, Spiral Model).
• Knowledge of software engineering.
• Knowledge of system design tools, methods, and techniques, including automated systems analysis and design tools.
• Knowledge of system life cycle management principles, including software security and usability.
• Knowledge of the systems engineering process.
• Knowledge of embedded systems.
• Skill in developing and applying security system access controls.