Information Assurance Engineer
Synergy Business Innovation and Solutions Inc. - Falls Church, VA

This job posting is no longer available on Indeed. Find similar jobs: Information Assurance Engineer jobs

Synergy BIS is looking for an Information Assurance (IA) engineer with an in-depth understanding of DIACAP process and who can perform security assessment and certification and accreditation of an enterprise level IT system.
This position is for a full-time IA engineer to support identification, analysis, mitigation and testing of security vulnerabilities of and compliance with DoD security guidelines for a Business Objects based reporting framework.

Key tasks include:
a) Assist the project team with developing and maintaining system security plans (SSP), information systems assurance programs, control guidelines and related security artifacts
b) Understanding and implementing Security Requirements for systems in compliance with DIACAP, and ensure the successful completion of the certification and accreditation process
c) Ensure that information systems securely operate according to the security controls documented in the SSP once systems are approved for the production environment
d) Respond to security incidents and events
e) Supports analysis including (but not limited to) network traffic patterns, security requirements, future growth requirements, feasibility for virtualization, resource requirements, risk mitigation, functional analysis, cost analysis, interface systems analysis, technical assessments, impact analysis, transition analysis, technology benchmarking, enterprise architecture analysis, and requirement analysis
f) Helps develop secure, scalable, and redundant solutions to meet the enterprise architecture applying all DISA STIG requirements and DoD best practices
g) Develops and follows Standard Operating Procedure (SOPs) and best business practices to ensure the developed solutions are reproducible and repeatable
h) Review administrator actions and adherence to security policies and regulations
i) Review account activity for administrators, privileged users and general users
j) Review and approve proposed changes to system baseline configurations
k) Work closely with the component information system security manager through regular briefings, meetings and discussions in regard to information security
Qualifications/Requirements
a) Bachelor's degree in communications, computer science, engineering or information assurance and 3 or more years of experience, or applicable experience in lieu of degree
b) 5+ hands-on experience in Certification and Accreditation and DIACAP related knowledge and experience with certification and accreditation process, DIACAP, NIST, and other intelligence community standards relating to information security
c) Knowledge and experience with server/client technologies, OSI model and the TCP/IP model
d) Experience with security vulnerability assessment tools (e.g., Nessus, Fortify,) and network scanning tools
e) Experience with AIX, Windows Server 2003/2008, Windows Domains, Active Directory, DNS are a plus
f) This position requires a US Citizen
License/ Certificate (any of the following a plus)
CISSP and Security Plus


Indeed - 11 months ago - save job