Address
Form of workJob Description
STR has an exciting opportunity for an ISSE to function as a key contributor for the Classified Cybersecurity Compliance team. In this dynamic position you will interface and collaborate with other Cybersecurity/Information Assurance (IA) professionals (ISSM's, ISSO's), Security professionals (CPSO's, FSO's), and System Administrators, on NIST compliance and configuration change management.
Responsibilities:
- Review/manage various IA Vulnerability Alerts (IAVA) (i.e., US-CERT, etc.) and overall remediation
- Conduct both vulnerability and compliance scans of Information Systems
- Support the development of Risk Management Framework (RMF) documentation and control validation testing for Authority to Operate (ATO) accreditations
- Support the development of cybersecurity requirements, design, and architecture
- Implement Information Assurance and Information Security protections and requirements in program development and execution environments
- Implement required security controls of networking devices, databases, operating systems, and hardware and software components
- Assist ISSM's and ISSO's in monitoring and resolving Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities
- Conduct reviews/technical inspections to identify and mitigate potential security weaknesses and ensure that all security features applied to a system are implemented and functional
- Support completion of Continuous Monitoring requirements IAW RMF and NIST SP800-53 requirements
- Perform other tasks as assigned by manager/supervisor
Requirements:
- Active Top Secret security clearance with the ability to obtain SAP and SCI access
- Two (2) to Four (4) years of technical (hands-on) experience related to Information Assurance/Cyber Engineering requirements, development, and implementation
- DoD 8570 IAM Level III certification (CISA, CISM, CISSP, etc.) or the ability to obtain within 6 months upon being hired
- Experience with NIST SP800-53 control implementation and assessment
- Familiarity with the DCSA Authorization and Assessment Process Manual (DAAPM) and the Joint Special Access Implementation Guide (JSIG)
- Experience with configuration/certification and auditing/analysis of Windows/Linux operating systems and system virtualization in peer-to-peer, LAN & WAN networks
- Experience with managing and implementing DISA STIGs and benchmarks in a variety of operations systems (Windows, Linux, Ubuntu)
- Experience with various IA vulnerability/compliance scanning tools (e.g., NMap, ACAS, Nessus, Security Content Automation Protocol (SCAP)
- Experience with maintaining/managing Security Incident and Event Management (SIEM) and centralized auditing tools (i.e., Splunk, PowerStrux)
- Familiarity with Microsoft Deployment Toolkit (MDT) and DISA Secure Host Baseline Framework
- Support hardening of new builds of Information Systems (IS) and ensure full functionality before deployment
- Familiarity with PowerShell scripting
- Detail oriented and self-motivated
- Excellent communication skills
- Ability to effectively prioritize multiple projects
- Ability to work with people in a team environment and deal effectively with changing project priorities
STR is a growing technology company with locations near Boston, MA, Arlington, VA, near Dayton, OH, Melbourne, FL, and Carlsbad, CA. We specialize in advanced research and development for defense, intelligence, and national security in: cyber; next generation sensors, radar, sonar, communications, and electronic warfare; and artificial intelligence algorithms and analytics to make sense of the complexity that is exploding around us.
STR is committed to creating a collaborative learning environment that supports deep technical understanding and recognizes the contributions and achievements of all team members. Our work is challenging, and we go home at night knowing that we pushed the envelope of technology and made the world safer.
STR is not just any company. Our people, culture, and attitude along with their unique set of skills, experiences, and perspectives put us on a trajectory to change the world. We can't do it alone, though - we need fellow trailblazers. If you are one, join our team and help to keep our society safe! Visit us at www.str.us for more info.
STR is an equal opportunity employer. We are fully dedicated to hiring the most qualified candidate regardless of race, color, religion, sex (including gender identity, sexual orientation and pregnancy), marital status, national origin, age, veteran status, disability, genetic information or any other characteristic protected by federal, state or local laws.
If you need a reasonable accommodation for any portion of the employment process, email us at appassist@str.us and provide your contact info.
Pursuant to applicable federal law and regulations, positions at STR require employees to obtain national security clearances and satisfy the requirements for compliance with export control and other applicable laws.
