Information System Security Engineer

As a member of our solutions delivery team, you will have the unique opportunity to work on programs advancing the digital transformation of critical government systems. This program is operating and enhancing geospatial applications in an enterprise environment.

Mission Focus:

NT Concepts is seeking a Information System Security Engineer to provide design, implementation and administration to a Geographic Information System (GIS) mission platform.  This role is a senior-level individual contributor to the data science team.  The team provides insight and innovation to advance the Sponsor’s capabilities to interrogate and analyze geospatial data.  We perform on the leading edge of machine learning, artificial intelligence, and advanced analytics in support of the IC mission.

Clearance: TS/SCI with Poly

Location/Flexibility: McLean, VA

Responsibilities: 

• Lead the Assessment and Authorization (A&A) and information assurance processes in accordance with Risk Management Framework (RMF) guidelines.
• Ensure the secure development and maintenance of tools, including managing accreditations and authorization processes; identifying and mitigating security risks and collaborating with stakeholders.
• Provide consultation, analysis and recommendations on system architecture, system configuration and data flows throughout the life cycle of tool development; including testing, operations, maintenance and decommission.
• Provide support services that include assisting project personnel in the identification and implementation of appropriate information security controls applicable to their systems, recommending mitigation strategies for vulnerabilities, recommending system exceptions and/or Plan of Action and Milestones, and assisting in the remediation of risk findings identified by Security.
• Maintain close liaison with ISSM office, with a focus on synthesizing ISSM guidance for streamlined and low-risk implementation for systems.
• Work with team to write and successfully execute Risk Mitigation Framework (RMF) and Plans of Action and Milestones (POA&Ms) to address cyber security issues and liens
• Serve as the office representative to relevant Cloud and Security related groups.
• Engage with C2E: Cloud Services Providers and provide recommendations for integration with customer tools as appropriate.

Qualifications:

• Clearance: Active TS/SCI with Poly
• Bachelor’s degree in a related field with a minimum of 12 years of relevant experience; or a Master’s degree with 10 years of experience; or a Doctorate with 8 years of experience.
• Proven experience in supporting A&A and information assurance processes.
• Strong understanding of DISA STIGs and hands-on experience with STIG Viewer.
• Comprehensive knowledge of current security risks, protocols, and best practices.
• Proven experience in supporting A&A and information assurance processes.
• Strong understanding of DISA STIGs and hands-on experience with STIG Viewer.
• Comprehensive knowledge of current security risks, protocols, and best practices.

Physical Requirements:

• Prolonged periods sitting at a desk and working on a computer.
• Must be able to lift up to 10-15 pounds at times.