A

Abacus Technology

IT, engineering, and enterprise management services

Cyber Security Principal

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeHanscom AFB, MA, USANo salary listedIn-person

About the Job

Requirements

  • At least 15 years of experience in the IT field, including at least 10 years in a cybersecurity role.
  • A master’s degree in a related field; additional years of experience may be substituted for the degree requirement.
  • A certification compliant with DoDD 8140 IAM Level III, such as GSLC, CISM, and/or CISSP.
  • Familiarity with DIACAP, the Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and Information Assurance (IA) Controls.
  • Experience with application and service development or architecture, testing, and administration.
  • Strong knowledge of Microsoft Windows technologies, including Active Directory, Windows administration, scripting, and Windows configuration techniques.
  • Basic Linux experience, including Red Hat and Fedora.
  • Networking experience with routers, switches, and firewalls.
  • Experience with Cisco and Juniper.
  • Strong desktop application administration experience, including Microsoft Office, web browsers, and antivirus applications.
  • Ability to work in a multidisciplinary environment and adapt to changing circumstances.
  • Oral and written communication skills.
  • Analytical skills for troubleshooting Information Assurance issues.
  • Ability to apply intensive and diverse knowledge to problems and make independent decisions.
  • Ability to work professionally and collaboratively with the government customer and other project team members.
  • U.S. citizenship is required.
  • A current Top Secret clearance is required.

Responsibilities

  • Serve as the Information System Security Manager (ISSM) and technical advisor on security issues for the Directorate; maintain the overall security posture of systems within the organization and be accountable for implementing DoDI 8510.01.
  • Support implementation of the Risk Management Framework (RMF).
  • Develop and maintain a formal Information Systems security program and policies for the assigned area of responsibility.
  • Support system and application assessment and authorization (A&A), including assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts required by DoD and Air Force policies, including RMF.
  • Ensure appropriate measures are taken when an Information System incident or vulnerability is discovered.
  • Maintain and report Information System and Platform Information Technology systems assessment and authorization status and issues in accordance with DoD Component guidance.
  • Provide direction to the Information System Security Officer (ISSO) to ensure compliance with established cybersecurity policies and procedures.
  • Coordinate with the organization’s security manager to address issues affecting the organization’s overall security.
  • Monitor compliance with cybersecurity policy, as appropriate, and review monitoring results.
  • Ensure cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations.
  • Ensure implementation of Information System security measures and procedures, including reporting incidents to the Authorizing Official (AO) and appropriate reporting chains, and coordinating system-level responses to unauthorized disclosures.
  • Ensure possible or actual data spills of classified information in Information Systems are handled in accordance with DoD regulations.
  • Act as the primary cybersecurity technical advisor to the AO for DoD Information Systems and Platform Information Technology systems under the role’s purview.
  • Ensure cybersecurity-related events or configuration changes that may affect system authorization or security posture are formally reported to the AO and other affected parties.
  • Ensure secure configuration and approval of IT below the system level, including products and IT services, in accordance with applicable guidance before acceptance into or connection to a DoD Information System or Platform Information Technology system.
  • Author, review, certify, and/or maintain Information Assurance and security management plans, including RMF Implementation Plans, System Security Management Plans, Information Support Plans, PPPs, Security Risk Analyses, Security Vulnerability and Countermeasure Analyses, Security Concepts of Operations, OPSEC Plans, and other system or network security-related documents.

Desired Qualifications

  • Familiarity with EITDR and eMASS.

About the Company

Abacus Technology

IT, engineering, and enterprise management services

Abacus Technology provides professional IT, engineering analysis, and enterprise management services. It helps clients solve complex technology challenges by delivering integrated, cost-conscious solutions that improve productivity. The company works by offering a full range of support services across information technology, engineering analysis, and enterprise management, tailoring solutions to each project and guiding work from planning to deployment. Compared with competitors, Abacus Technology emphasizes total client satisfaction, a comprehensive suite of services, and practical, results‑oriented outcomes designed to help customers “make technology count.” The goal is to help clients increase productivity and efficiency while keeping costs down by applying proven methods and expert support.

Company size
501-1,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Chevy Chase Village, MD
Founded
1983

Recently Posted Jobs

Explore more opportunities at Abacus Technology

See more jobs