Job details
Job type full-time
Full job description
Position description: advanced cyber security engineer
If you love high profile and challenging programing projects supporting the us navy- serco has a great opportunity for you! this advanced cyber security engineer will be on a dynamic team supporting a major acquisition command building navy ships at the washington navy yardBring your expertise and collaborative skills to make an impact towards our military defense and safety of our sailors.
You will be part of a team that works closely with the customer and other serco teams to deliver quality systemsYou will:
Provide information system software analysis, software requirements analysis and definition support, design, development, test, modification, installation, implementation, quality assurance, training, and documentation to meet the evolving data storage and reporting needs of programs and management.
Ensure all contractor personnel performing cybersecurity functions possess and sustain the certifications and credentials required of the information assurance workforce (iawf)/cybersecurity workforce (cswf), in accordance with navsea instruction 5239.7, dfars, dod8570.01-m and secnav m-5239.2, and dod 8570.01-m, prior to accessing dod information systems.
Analyze existing it and is databases, web sites, and it applications and recommend new or improved interfaces and improved management tools that meet new management requirements or improve management effectiveness and efficiency.
Perform maintenance and technical support for local area networks (lan) and wide area networks (wan) that are outside the cognizance of the navy marine corps intranet (nmci).
Modify, implement, and maintain web-based information systems and links.
Develop web-site structure, prepare documentation for population, and implement and maintain web sites.
Provide systems engineering and technical support for establishment, test, upgrade, and operational support of systems, networks, workstations and support equipment hardware and software that are outside the cognizance of nmci.
Conduct cybersecurity analyses using data provided as gfi, develop, recommend, and implement, monitor, update, and maintain cybersecurity practices, procedures, equipment, algorithms, and hardware that are outside the cognizance of nmci.
Perform periodic review of systems to ensure cybersecurity is fully integrated into all phases of acquisition, upgrade, or modification programs, including initial design, development, testing, fielding, operation, sustainment, and disposal.
Ensure adequate security measures are incorporated into the system designs to satisfy cybersecurity requirements.
Serve as navy risk management framework (rmf) validator responsible for performing a compliance review and analysis of cybersecurity requirements; hereafter referred to as navy qualified validators (nqvs) as defined by the navwar qualification standard, responsibilities, and registration process for navy qualified validators (nqv) of 4 march 2016 and secnavinst 5239.20a, navy information assurance (ia) program.
Upon completion of the compliance review send the results to the peo that will then submit the results to the navy authorizing official (nao) or functional authorizing official (fao), per applicable navy rmf processes, for consideration in approving complianceIn this capacity, independently validate cybersecurity artifacts developed by system owners for the systems identified including systems requiring validation, and other systems under the cognizance of the program offices included in this solicitation as part of the rmf accreditation and authorization process that are uploaded to don enterprise mission assurance support service (emass).
Develop rmf accreditation packages using current dod instruction 8510.01 accreditation methods, to include the system authorization boundary, hardware/software/firmware list, dataflow diagram, security plan, plan of action and milestones (poa&m), system categorization, enterprise reporting rmf scorecard, system level continuous monitoring (slcm) strategy, risk assessment report (rar), security assessment plan (sap), and security assessment report (sar).
Identify security controls to be implemented to ensure compliance with applicable security standards, work with system owners to implement and test controls, prepare required artifacts, and complete actions required in the rmf in the timeframe in which they are required for systems under the cognizance of the program offices.
Provide cybersecurity governance and policy support for cybersecurity strategies aligned with business goals and objectives; develop cybersecurity governance frameworks to support the cybersecurity strategies; integrate cybersecurity governance into enterprise governance, assist in developing cybersecurity policies that guide the development of standards, procedures and guidelines; assist in developing business case analyses that justify the investment in cybersecurity; and assist in identifying methods to select, implement and interpret metrics and key indicators.
Provide systems security engineering and technical support in the development of trustworthy, cyber resilient systems with engineering-based solutions that manage the growing complexity, dynamicity and interconnections of today’s systems as exemplified by cyber-physical systems, control systems and systems of systemsThis approach shall address the engineering driven perspective and actions necessary to develop more resilient, defensible, and survivable systems, inclusive of the machine, physical and human components that compose the system.
Provide assessment and authorization (a&a) support services on all aspects of the dod risk management framework (rmf), process and support the management and execution of cybersecurity afloat a&a activities.
Perform a compliance review and analysis of cybersecurity requirements for afloat control systems/pitSupport for the evaluation, assessment, incident response and statistical analysis/record keeping of defense industrial base (dib) cleared defense contractors (cdc) compliance with dfars 252.204-7012 and nist special publication 800-171 r1, protecting controlled unclassified information in non-federal systems and organizations.
Analyze, develop, review, evaluate and provide recommendations for methods to obtain information assurance accreditationIn support of ia related efforts, you will:
Support data protection and segregation of data at different security classifications, assist and work to integrate cybersafe methodologies onto current platforms and requirements (specifically ssbn, columbia and virginia) and support providing direction following vulnerability assessment for platform specific ia requirements.
Monitor accreditation for platform information technology (pit) and cross domain solutions, policy, process, and documentation work to continue process improvement and accelerate cybersafe tactics, techniques, and procedures (ttp) development.
Execute vulnerability assessments and correct deficiencies, manage technology, cybersecurity solutions and prioritize future development, aid with developing and continuing implementation of ia technical authority (ta) standards.
Monitor accreditation efforts for ti18, ti20 and planning for out-years, assist the program office with communicating ia issues as early as practical as to reduce impact on modernization or operations and formulating and executing a navsea cybersecurity domain plan.
Provide direct expertise and assistance, as requested, to ensure that cybersecurity is fully integrated in accordance with dodi 8500.01 and dodi 5000.02.
Qualifications:
To be successful in this role, you will have:
A current or active dod secret security clearance.
A bachelor`s level degree in computer science or in a technical or managerial related field.
Eight or more years of experience with rdt&e and business it systems and the phases of certification and accreditation (c&a) process.
Qualification as a level iii navy qualified validator (nqv) as defined by dod instruction 8510.01 - risk management framework (rmf) for dod information technology (it).
Additional desired experience and skills:
Ten or more years of experience in an information assurance (ia) or c&a related fieldFamiliarity with and understanding of navy it sites, systems, and infrastructure.
Experience working with navy c&a efforts as a navy validatorDemonstrated oral and written communication skills to work closely with all levels of personnel involved in it operations and technical aspects of systems.
If you are interested in supporting and working with our military and sailors and a passionate serco team- then submit your application now for immediate considerationIt only takes a few minutes and could change your career!
Company overview: serco inc(serco) is the americas division of serco group, plcSerco serves every branch of the u.sMilitary, numerous u.sFederal civilian agencies, the intelligence community, the canadian government, state and local governments, and commercial clientsWe help our clients deliver vital services more efficiently while increasing the satisfaction of their end customersHeadquartered in herndon, virginia, serco americas has over 9,000 employees and is part of a $4 billion global business that helps transform government and public services around the worldAt serco, our employees are our most valuable asset - we listen, respect and support them throughout their career at sercoWe invite you to become part of our dynamic teamSerco is an equal opportunity employer committed to diversifying our workforce (race/ color/ sex/ sexual orientation/ gender identity/ religion/ national origin/ disability/ vets).
To review serco benefits please visit: https://www.serco.com/na/careers/benefits-of-choosing-serco.
If you require an accommodation with the application process please email: careers@serco-na.com or call the hr service desk at 800-628-6458, option 1Please note, due to eeoc/ofccp compliance, serco is unable to accept resumes by email.
Serco does not accept unsolicited resumes through or from search firms or staffing agencies without being a contracted approved vendorAll unsolicited resumes will be considered the property of serco and will not be obligated to pay a placement or contract feeIf you are interested in becoming an approved vendor at serco, please email agencies@serco-na.com.
Covid-19 regulations: the safety, health and wellbeing of our employees, their families and the communities in which we work is important to sercoAs a federal government contractor, we comply with all customer, federal, state, provincial and local requirements regarding covid-19 regulations, including covid-19 vaccinations and testing requirementsThis means that our employees and new hires, whether working at a customer site, working remotely, or working in a serco facility, will need to adhere to applicable covid-19 requirementsThese requirements may include vaccination, attestations regarding your vaccination status and/or covid-19 testing, and you may be required to show proof of vaccination and/or negative test results as a condition of your employmentRequests for an accommodation will be reviewed and assessed under applicable laws and regulations.
