Systems Security Engineer Job

Systems Security Engineer Job

Systems Security Engineer (Job Number:313009)

Description:



The Intelligence Systems Business Unit of SAIC has a career opening for a Systems Security Engineer in Linthicum, Maryland.

JOB SUMMARY:
The Security Engineer will be responsible for providing support in the area of System Security Engineering for a software application that is currently in the development phase and will eventually be placed in a classified lab environment based on a cloud computing architecture. This is an excellent opportunity to work in a agile software development effort where SAIC is developing and refining a proof of concept using cutting edge technologies.

PRIMARY RESPONSIBILITIES:
.Provide engineering support for annual Department of Defense Information Assurance Certification and Accreditation Process certification/re-certification efforts to include Security Test and Evaluation (ST&E) activities.
.Lead cross-functional, matrix teams of individuals from IT infrastructure and applications to design and implement improved security controls. Analyze the current situation and chart and maintain momentum on a constructive path that is practical given the information exchange issues.
.Provide support and guidance to ISSO/SO's through the creation of artifacts or continued support of processes to include, but not limited to: Plan of Action and Milestones (POA&M) and the remediation process, lifecycle of the C&A process for the system or application to include compliance monitoring, self-assessments, and vulnerability scans.
.Develop security documentation.
.Identifying and evaluating C&A requirements for their applicability to the application.
.Pre-test planning, coordination, scanning, assessing results, remediation of vulnerabilities, and residual risk reporting.
.Generating and maintaining security documentation in support of C&A package requirements.
.Creation of system security requirements during design.
.Review program threats, perform risk assessments, and conduct vulnerability analyses to define security functional requirements for effectively securing systems against overt and covert attack.
.Provide subject matter expertise (SME) and consultative support to application developers in the identification of information security issues and requirements.
.Perform security assessments or perform audits of security environment, as well as review and prioritize security change requests.

Qualifications:
BASIC QUALIFICATIONS:
.Bachelor's Degree and 16+ or a Master's Degree and 14+ years of related experience.
.Familiarity with the ICD 503, CNSSI 1253, NIST 800-53 Rev 3, and NIST SP 800-53A Rev 1, and the principle of overlays.
.Experience conducting C&As for a system as a whole and for an isolated application.
.Certified Information System Security Professional (CISSP) and/or Certified Information Security Manager (CISM).
.Experience with one of the following: NIACAP, DITSCAP or DIACAP C&A process requirements.
.Experience identifying requirements and security controls necessary to facilitate the accreditation process for a software application in an Intelligence Community (IC) environment.
.Experience developing security specific documentation creation and maintenance to include:
-System Security Plan (SSP) or Information System Security Plan (ISSP),
-System Rules of Behavior (ROB),
-System Security Concept of Operation (SSCO)
-Plan of Actions and Milestones (POA&M)
-Risk Assessment Reports (or Vulnerability Analysis Technical Reports)
-Security Assessment Plans (SAP) and Security Assessment Reports (SAR)
.Currently possess a TS/SCI with Polygraph security clearance.

PREFERRED QUALIFICATIONS:
.Familiarity and experience working in an agile lifecycle development environment.
.Familiarity with the following DoD Directives: Directive 8500.1, Information Assurance Instruction; Directive 8500.2, Information Assurance Implementation; Directive 8570.01, Information Assurance Training, Certification, and Workforce Management; DoD Manual 8570.01-M, Information Assurance Workforce Improvement Program.
.Familiarity with Cloud Security (e.g., FedRAMP principles or processes or training as with Cloud Security Essentials).
.Familiarity with scanning tools (e.g., e-Eye Retina and Harris Stat or PatchLink).
.Familiarity with running Web and Database SRRs and providing remediation support.

SAIC Overview:

SAIC is a FORTUNE 500® scientific, engineering, and technology applications company that uses its deep domain knowledge to solve problems of vital importance to the nation and the world, in national security, energy & environment, health and cybersecurity. The company's approximately 41,000 employees serve customers in the U.S. Department of Defense, the intelligence community, the U.S. Department of Homeland Security, other U.S. Government civil agencies and selected commercial markets. Headquartered in McLean, Va., SAIC had annual revenues of approximately $10.6 billion for its fiscal year ended January 31, 2012. For more information, visit . SAIC: From Science to Solutions®

Job Posting:Aug 16, 2012, 6:09:36 AM
Primary Location:United States-MD-LINTHICUM

Clearance Level Must Currently Possess:Top Secret/SCI with Polygraph
Clearance Level Must Be Able to Obtain:None
Potential for Teleworking:No
Travel:None
Shift:Day Job
Schedule:Full-time