What are the responsibilities and job description for the Systems Security Engineer position at UICGS / Bowhead Family of Companies?
SYSTEMS SECURITY ENGINEER (RDTE)
Bowhead is seeking a Systems Security Engineer in Dahlgren, VA. In this role, you will be responsible for developing and maintaining Risk Management Framework (RMF) Assessment and Authorization (A&A) packages for our clients. You will work closely with other developers, as well as with stakeholders from different departments, to ensure that our RMF A&A packages are accurate, complete, and meet all necessary requirements.
Essential functions for the Systems Security Engineer include, but are not limited to:
Physical Demands:
Bowhead is seeking a Systems Security Engineer in Dahlgren, VA. In this role, you will be responsible for developing and maintaining Risk Management Framework (RMF) Assessment and Authorization (A&A) packages for our clients. You will work closely with other developers, as well as with stakeholders from different departments, to ensure that our RMF A&A packages are accurate, complete, and meet all necessary requirements.
Essential functions for the Systems Security Engineer include, but are not limited to:
- Develop and maintain RMF A&A packages for our clients
- Work closely with stakeholders to gather information and ensure that RMF A&A packages meet their needs
- Conduct security assessments of information systems to identify vulnerabilities and risks
- Strong oral and written communication skills; write clear and concise reports detailing assessment findings and recommendations for risk mitigation
- Collaborate with other developers to ensure that RMF A&A packages are integrated smoothly with other systems
- Keep up-to-date with the latest trends and technologies in RMF A&A package development
- Three or more (3 ) years of experience in RMF A&A package development
- Strong knowledge of NIST SP 800-53, NIST SP 800-37, and other relevant cybersecurity standards and guidelines
- Experience with the Enterprise Mission Assurance Support Service (eMASS) or managing DoD and DoN IA Portfolios is a plus
- Prefer a working knowledge of STIG Viewer, Vulnerability Remediation Asset Manager (VRAM) reporting and understanding of Compliance Task Orders (CTO)s
- Knowledge of RDT&E and/or tactical systems
- Knowledge of Interim Authority to Test (IATT)
- Ability to communicate effectively with all levels of employees and outside contacts
- Strong interpersonal skills and good judgment with the ability to work alone or as part of a team
- Experience with security assessment tools such as Nessus
- Experience with security control implementation and testing
- Strong problem-solving skills and attention to detail
- Ability to work independently as well as in a team environment
Physical Demands:
- Must be able to lift up to 10 pounds
- Must be able to stand and walk for prolonged amounts of time
- Must be able to twist, bend and squat periodically
Salary : $100,000 - $125,000