Security Engineer

3. SECURITY ENGINEER

The successful candidate will be responsible for development, documentation, and evaluation of system and enterprise information assurance solutions. Candidate will support development of Security Awareness Training, interpret Security policies and standards, and document procedures and guidelines. Candidate will assist in the design and implementation of IS security requiring the integration of advanced technologies and technological concept and complex information systems. Candidate will provide computing security and integration services to IPTs using knowledge of secure architectures, secure electronic data communications, network and data security, electronic commerce, and other related areas. Specifically, candidate will assess STIGs, IAVAs, etc. for the program.  Candidate will develop and implement project certification and accreditation documentation with respect to the certification & accreditation of developmental and operational systems in order to meet USTRANSCOM program goals. Candidate will review architectures for security impacts, and provide recommendations when required.  Candidate may interpret and negotiate requirements, develop procedures and monitor practices to ensure government requirements are properly implemented. Candidate will investigate, analyze and resolve complex information system questions and problems. Candidate will develop computing systems security documentation and ensure compliance with DoD Information Assurance guidance and policy.  Candidate should be familiar with DECC policies/procedures, and potentially have experience writing ASSPs (Application System Security Plans).

 

Required skills:  Strong system security engineering and integration skills especially in the areas of identity and access management and LDAP directory services. Strong organizational skills, interpersonal skills and communication skills, both oral and written, and the ability to communicate at a technical level. Strong teamwork, problem solving, and customer interaction skills Knowledge of information security concepts, theory, and applications such as secure architectures, secure electronic data communications, network security, protection of sensitive data. Knowledge of information systems technology such as computing platforms, systems integration, analysis and architecture.

 

Desired skills: Experience or familiarity with  LDAP directory services, data warehousing, Web application servers, Enterprise Service Bus (ESB), business intelligence (BI), and extract transform and load (ETL) . Experience with transportation/logistics domain.  CISSP or similar certification is a plus. Extensive COTS integration. Experience designing, configuring, integrating and testing implementations of portal, enterprise service bus, extract-transformation-load, system management, data protection, case management, workflow management, search tool, and entity extraction COTS products.

 

Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.