Information Security Systems Engineering

Job Title: Information Security Systems Engineering

Job Code: 36149

Job Location: Melbourne, FL

Job Schedule: 9/80 Regular

Job Description:

The successful candidate will support a highly motivated engineering team in defining, designing, implementing, documenting, testing and sustaining security solutions on National Security Systems, or other systems engineered for our government customers, using current standards within National Institute of Standards & Technology (NIST) Risk Management Framework, Special Publications 800-37, 800-53, 800-171, and other NIST publications; Committee on National Security Systems Instruction (CNNSI) 1253, Joint SAP Implementation Guide (JSIG), and Federal Information Processing Standards (FIPS) to certify and achieve system accreditations.

The successful candidate will work with system developers or commercial product vendors in the design and evaluation of state-of-the-art secure systems, networks, and database products, using methods such as encryption technology, vulnerability analysis and security management.

Essential Functions:

• Knowledge of AWS cloud environment as it relates to NIST Risk Management Framework (RMF) related NIST publications, to include writing System Security Plans, Security Control Traceability Matrix, Continuous Monitoring Plan, Security Assessment Plans & Procedures, Security Concept of Operations, Plan of Action and Milestones.
• Within an AWS cloud environment, implementing/assessing security controls, to include writing system security categorization memorandum, recommending appropriate security control overlays, define security control baseline based on defined system security categorization and approved security overlays, and apply security controls to computing/network nodes and verify implementation of security controls.
• Assist in systems engineering functions, to include creation of data flow diagrams, interface control documents, and perform trade studies.
• Define/manage systems/security architectures including system security boundaries, vulnerability management and risk mitigation and remediation strategies within networks, systems, applications and new technology initiatives (hardware, software, firewalls, intrusion detection systems, anti-virus systems and software deployment tools) in cloud systems.
• Define/manage systems/security architectures including system security boundaries in on-premises data center systems and ultimately deploy to secure cloud-based system, to include configuration and use of defense and assessment tools specific to each environment type.
• This position is performed 100% onsite and cannot be performed remotely.

Qualifications:

• Bachelor’s Degree with a minimum of 4 years of prior related experience. Graduate Degree with a minimum of 2 years of prior related experience. In lieu of a degree, a minimum of 8 years of prior related experience.
• Ability to obtain a NOAA Public Trust.
• 1+ years of AWS cloud experience.

Preferred Additional Skills:

• Perform with Model Based System Engineering (UML, SysML, UAF).
• Ability to obtain DoD 8140.03 certification, or equivalent NIST 800-181 certification within 12 months of hire.
• Expertise with RMF in a GovCloud environment

#LI-NB1