Senior Information System Security Engineer

Overview

i3 is seeking a creative and driven professional with a passion for solving real world issues on a cross-functional, fast paced team. As the Senior Information System Security Engineer you will support audits on computer systems and networks to determine if they are operating securely and that data is protected from both internal and external threats. You will make assessments of assigned systems to determine the system security status and ensures compliance to security policies, procedures and standards with regards to Risk Management Framework (RMF). The Senior Information System Security Engineer will apply communication, analytical, and problem-solving skills to help identify, communicate and resolves issues in order to maximize the benefit of IT systems investments. This position is located in Huntsville, AL.

Responsibilities

• Develop and maintain all RMF Policies and SOPs
• Responsible for the management and implementation of all Information Assurance Programs to include SCAP, STIG, ACAS, HBSS and Continuous Monitoring activities
• Applying security control guidance as defined in DISA’s Security Technical implementation Guides (STIGs)
• Validating compliance against technical security control baseline and defining a repeatable process
• Monitor, track and address Information Assurance Vulnerability Alerts (IAVAs)
• Monitor, and track all patches perform by the SA team on a monthly basis
• Conduct ACAS Scans on multiple server stacks weekly within the development environment and analyze ACAS reports; coordinate mitigations to stay in compliance with the applicable STIGs and Continuous Monitoring Management Plan
• Ensures compliance with security principles and methods as defined by the RMF, AR 25-2, NIST SP800-53, and other Army Regulations
• Responsible for the tracking and management of all Cyber-related training requirements via ATCTS for all personnel
• Assist with mitigations and implement Risk Management Framework (RMF) Continuous monitoring tools and processes
• Integrate COTS products to collect, display and remediate a variety of automated system security and system operations
• Create and brief cybersecurity reports for senior program leadership
• Review all Vulnerability Scans and Audit log on a quarterly basis and log result
• Maintain eMASS RMF package for both production and development environments; Maintain 2 Army ATO’s
• Update antivirus definitions files within the HBSS suite; complete the DISA HBSS training
• Participate in all Technical Review Boards, Engineering Review Boards, and Configuration Change Boards
• Analyze all Security Impacts for all change requests; route to program ISSM for approval
• Document all vulnerabilities or non-compliant findings within the Plans of Actions and Milestones (POA&M) template
• Work with DISA for identifying and document all POA&M’s related to new implementations within the Production Environment.
• Complete yearly FISMA and Self-Assessment requirements

Qualifications

• Bachelor’s degree and (8) years of relevant IT experience or (10) years of relevant IT experience.
• DoD 8570.01-M certified – Current IAT III minimum Certification
• ACAS Operator and Supervisor course (Certificate of Training)
• HBSS 201 (base level) (Certificate of Training)
• eMASS Computer Based Training (Certificate of Training)
• Should be familiar with Splunk
• Experience working with system/network vulnerability scanning tools
• Experience working with eMASS, STIG, and SCAP tools
• Active secret clearance preferred
• Must be able to obtain and maintain the level of clearance required
• ACAS Certification a Plus
• HBSS Certification a Plus
• U.S. Citizenship is required

About i3

Headquartered in Huntsville, AL, i3 is a national leader in providing innovative technical and engineering solutions to a broad customer base across the U.S. DoD. Specializing in missile and aviation engineering and logistic services, electronic warfare and electromagnetic affects analysis, UAS system integration and flight operations, full lifecycle C5ISR engineering services, engineering analysis, cybersecurity and IT/IA innovative solutions and virtual training, simulation & serious game development and implementation.

• We were founded in 2007 with the intent to do business differently.
• Our focus is to leave our team members, our customers and our communities better than we found them.
• Our ultimate goal is to strengthen our Nation and our warfighter.

Perks and Benefits at i3:

• 100% team member owned
• Outstanding insurance coverage
• 401(k) match
• Health and wellness incentives
• Tuition and certification reimbursement
• Generous PTO
• Fun culture with company activities
• Countless opportunities to give back to the community through our charitable organization, i3 Cares

We work hard. We compete hard. We play hard. Apply now to join us!