Information Assurance and Security Engineer

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

💵 $86 000 - $138 000 / an

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

👻 Score fantôme 6%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Peraton

Site WebLinkedInTous les Emplois

10 000+ employés

💼 Conseil

🏥 Santé

📦 Logistique

Consulting • Healthcare • Logistics

Peraton est une entreprise axée sur les missions qui soutient les initiatives de sécurité nationale grâce à des services avancés en informatique et cybersécurité. Ils offrent des capacités dans des domaines tels que la cyber défense, les opérations cloud, l'ingénierie et le renseignement. Avec un engagement à résoudre des défis complexes, Peraton intègre des technologies axées sur les données pour assurer le succès des missions pour leurs clients militaires et gouvernementaux.

Description

• Provide technical and programmatic information assurance services for network and information security systems across the DEERS application portfolio • Design, develop, and implement security requirements in business processes, DevSecOps pipelines, OCI cloud migration, and Agile development sprints • Prepare and maintain SSPs, SARs, POA&Ms, STIG checklists, and implementation plans in eMASS • Prepare ST&E plans and support formal security assessments with DMDC CSD and Enterprise ISSOs • Provide C&A/A&A support, including security and contingency plans, aligned with DoDI 8510.01 and NIST SP 800-37 RMF • Conduct risk and vulnerability assessments and develop mitigation strategies • Analyze policies and procedures against federal laws and regulations and recommend compliance-gap remediation • Implement security enhancements and support IAVA monitoring and monthly resolution activities • Develop, test, and integrate Fortify, Sonatype, and BURP security scanning into the DevSecOps pipeline • Secure system configurations, conduct STIG and NIST baseline compliance scans, and report results • Conduct security program audits and support 1–3 external audits annually • Support security architecture and OCI cloud migration at DISA IL-4/IL-5 authorization levels • Assist with computer incident investigations and report cyber incidents within required timelines • Submit and update POA&Ms according to vulnerability-severity deadlines • Support ISCM activities and report weekly vulnerability scan status during IPRs • Maintain ATOs and A&I packages through the full RMF lifecycle • Implement JFHQ-DODIN and USCYBERCOM CTOs • Ensure cybersecurity workforce personnel are screened, trained, and certified under DoD 8140.03 and CMMC requirements • Conduct mandatory security training covering OPSEC, CUI, Insider Threat, Privacy Act/PII, IT Security, Counterintelligence, Antiterrorism, and Records Management

🎯 Exigences

• Minimum of 8 years with BS/BA; minimum of 6 years with MS/MA; minimum of 3 years with PhD; 12 years with high school diploma • Ability to obtain and maintain DoD Public Trust • Hands-on experience with DoD Risk Management Framework (RMF) and eMASS • In-depth knowledge of NIST SP 800-53 Rev 5, NIST SP 800-37, NIST SP 800-171 Rev 2, NIST SP 800-137, FISMA, DoDI 8510.01, and DoDI 8500.01 • Experience conducting vulnerability assessments, developing POA&Ms, and managing the full A&A lifecycle including ATO package development • Experience with Fortify, Sonatype, and BURP application security scanning tools • Familiarity with OWASP secure coding practices • Working knowledge of STIG compliance verification, checklist preparation, and remediation • Demonstrated experience supporting DevSecOps security practices within Agile development environments • DoD 8140.03 / DoD 8570.01-M compliant IAT/IAM Level II certification, such as CISSP, CASP+, CEH, Security+, or equivalent • Preferred: active Public Trust clearance • Preferred: CISSP or equivalent advanced certification • Preferred: cloud security experience at FedRAMP Moderate, DISA IL-4, or DISA IL-5 authorization levels; OCI security configuration familiarity • Preferred: familiarity with CMMC • Preferred: external DoD financial/operational audit experience • Preferred: ServiceNow, JIRA, and SharePoint • Preferred: DFARS 252.204-7012 cyber incident reporting knowledge • Preferred: JFHQ-DODIN or USCYBERCOM CTO implementation experience • Preferred: prior S-ISSO experience in a large-scale DoD program environment

🏖️ Avantages

• Potential eligibility for overtime • Shift differential • Discretionary bonus • Equal opportunity employment, including disability and protected veterans