Sr. Security Engineer

Responsibilities

• Support of compliance involves performing security services in accordance with applicable DoD and Army cybersecurity guidance and regulations.
• Measure ARNG compliance with cybersecurity requirements and recommend cybersecurity program operational execution activities, processes, and practices.
• Identify, protect, detect, respond, recover, and analyze threats to the ARNG enterprise network and its enabling technologies based on compliance-related gaps and risks, in close coordination with the RCC-NG.
• Assist ARNG with identifying vulnerabilities in the ARNG enterprise network and its enabling technologies and assessing compliance with cybersecurity requirements and prescribed operational execution activities, processes, and practices.
• Assist the Government with ensuring the secure configuration and preparation for approval of IT below the system level (e.g., products, IT services, and Platform IT (PIT)) in coordination with the RCC-NG and in accordance with applicable guidance prior to acceptance into, or connection to, an Army IS.
• Ensure cybersecurity inspections, tests, assessments, and reviews are synchronized and coordinated with all stakeholders.
• Assist in the implementation, management, and administration of the organization’s structure and workflow within Enterprise Mission Assurance Support Service (eMASS).
• Assist in the enforcement of the use of Army-approved procedures for clearing, purging, reusing, and releasing system memory, media, output, and devices.
• Conduct reviews of cybersecurity information papers and plans with CYBERCOM, ARCYBER, Air National Guard Cyber, National Security Agency (NSA), Federal Bureau of Investigations (FBI), Department of Justice (DOJ), and Department of Homeland Security (DHS).
• Assist in the enforcement of the DoD Cyberspace Workforce Framework (DCWF) and cybersecurity certification program to ensure training and certification requirements are enforced, managed, and reported.
• Assist ARNG with the development and implementation of a documented and streamlined process for reviewing, processing, and approving systems access requests.
• Leverage the Assured Compliance Assessment Solution (ACAS) and other compliance-related tools to scan network devices for compliance with current best practices and CCRI requirements to interrogate systems for configuration and status.
• Create and submit appropriate security-related reports, such as those required by IAVA, intrusion, virus infection incidents, FISMA, and others as requested by the Government. Track IAVA compliance at the enterprise level and coordinate and report on state efforts to achieve compliance.
• Ensure that DoDIN-A(NG) and DoDIN-A(NG)-S and its management systems are compliant with all IAVA and Common Vulnerabilities and Exposures (CVE). The contractor shall leverage the ACAS and other reporting sources to perform coordination with states on Information Assurance Vulnerability Management (IAVM)/CVE and compliance findings remediation.
• Assist the states and territories in scan policy implementation, appropriate asset identification, plug-in related issues, and general scan-related troubleshooting.
• Coordinate with the SOC and the RCC-NG to leverage the AESS tools suite to perform coordination with states on compliance findings and remediation efforts. The contractor shall leverage AESS tools suites to monitor rogue systems, update signatures, and install agents as required and in coordination with the SOC.
• Review and appropriately process FPA requests and WCF requests to validate requirements and appropriately identify associated risks.
• Assist in examining the security architecture and vulnerabilities of systems in cooperation with system owners and administrators through security scans, examinations of system configurations, reviews of system design documentation, and interviews. The contractor shall support the development and maintenance of process documentation in support of system(s) authorization efforts.
• Use available technology to generate maintenance tasks and underlying workflows that will underpin compliance requirements and associated documentation. 

Required Experience/Qualifications

• Bachelor's degree required

• Possess the appropriate baseline certification(s) to achieve DoD 8570.01-M Information Assurance Technical (IAT) Level III (CASP or higher)

Preferred Experience/Qualifications

• Possess an ITIL® v3 or ITIL® 4 Foundation or a higher in either category.

Special Requirements/Security Clearance

• Active SECRET DoD clearance
• By Light does not require COVID-19 vaccinations or boosters; vaccination requirements and testing are subject to the status of the federal contractor mandate and customer site requirements; testing is at the cost of the employee.