Senior Security Systems Engineer

Job Description

Job Description

This position requires U.S. citizenship and an active U.S. DoD clearance.

Candidates who are not U.S. citizens are not eligible for this role.

Imagine One Technology & Management, Ltd. is seeking two (2) Senior Security Systems Engineers . These positions are contingent upon award of the associated work and will be performed in Dahlgren, Virginia.

The Senior Security Systems Engineers will be expected to:

• Author DoD Assessment and Authorization (A&A) artifacts.
• Document a system from a cybersecurity perspective using Microsoft (MS) Office including MS Word, MS Excel, MS Visio and other appropriate tools.
• Derive, document and/or identify system Concept of Operation (CONOPS) for Mission Assurance Categorization per DoDI 8500.2.
• Lead the research, recommend and document logical and physical solutions that prevent, detect and correct the system to be certified and accredited.
• Research and apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and National Security Agency (NSA) recommendations.
• Lead the identification of disagreements between as built specifications, security requirements and DoD security policies and design implementations to bring the system into compliance.
• Plan, develop, execute and document results of security test procedures.
• Lead the analysis and testing of a designated US Naval warfare system against known vulnerabilities based upon security approaches and known hacker techniques and exploits.
• Lead and perform as Information Assurance Officer to be focal point for all security matters related to specific sets of information systems.
• Lead the preparation and execution an Information Assurance Vulnerability Management (IAVM) Plan.
• Lead the preparation and production of a System Security Administrator and Operators Manual (SSAOM).
• Lead obtaining Authorization to Operate (ATO) and resolve issues in the event a US Naval warfare system is issued an Interim ATO (IATO).
• Lead the technical support effort in identifying and specifying requirements and performing risk assessments.

Desired Experience:

• Five (5) years of program-specific security engineering experience working with Navy afloat/tactical combat systems -or- ten (10) years general security engineering experience.
• Possess an in-depth understanding of computer security, military system specifications, DoD Cybersecurity policies for both land-based, afloat/tactical systems, or System Security Plan (SSP) CSSE, and the ability to communicate clearly and succinctly in written and oral presentations.
• Combat weapons systems knowledge.
• Experience executing all aspects of the Systems Engineering Technical Review (SETR) Process.
• Possess an in-depth understanding and experience in Risk Management Framework (RMF), Platform IT (PIT), and the implementation of Cybersecurity and cyber boundary defense techniques and various Cybersecurity appliances.
  1. Examples of these appliances and applications are Firewalls, IDS, IPS, Switch/Routers, Cross Domain Solutions (CDS) and Host Based Security Systems (HBSS).
  2. Examples of engineering experience include developing secure network architectures, security design, developing engineering documentation, application of Model Based System Engineering (MBSE), cyber testing, cyber test analysis, or development of secure computing system architectures.
• Highly desired: five (5) or more years of engineering experience on Aegis, SSDS, Zumwalt, or other Navy afloat tactical combat systems.

Desired Education:

• Bachelor’s degree desired

Security Requirements:

• Active DoD Secret security clearance required

Imagine One Technology & Management, Ltd., offers a full package of benefits and competitive salary, excellent group medical, vision, and dental programs. 401K savings plan; $4K annual tuition reimbursement ($5K if pursuing master’s degree); employee training, development, and education programs; profit sharing; advancement opportunities; and much more!

ISO 9001:2015, ISO 20000-1:2018, ISO 27001:2013
CMMI Development and Services - Maturity Level 3
An Employee-Owned Business

EEO/Veterans/Disabled