Technical Security Engineering
Conduct in‑depth technical reviews of system architectures and document security-relevant components for SSPs and CONOPS.
Lead the development, review, and execution of all RMF/ICD 503 documentation, including SSP, CONOPS, Contingency Plans, User Guides, and SOPs.
Review and update control volatility assessments based on evolving threats, IC policies, federal standards, and system sensitivity levels.
Support Information Systems Continuous Monitoring (ISCM) activities, performing technical content reviews and recommending improvements.
A&A Execution and Compliance
Track, document, and communicate A&A progress across multiple systems to customer leadership.
Own POA&M development, mitigation strategies, and evidence collection from system owners and engineers.
Provide audit liaison support for internal and external audits, delivering concise, actionable recommendations.
Ensure ongoing compliance and readiness through proactive security oversight and risk assessments.
WHAT YOU’LL NEED TO SUCCEED
Required Education and Experience: Technical Training, Certification(s) or Degree + 10 years
10+ years of cybersecurity, information assurance, or security engineering experience.
Cleareance: Active TS/SCI with Polygraph
Certification Required: DoD Manual 8570.01-M at the Information Assurance System Architects & Engineer (IASAE Level II) role
Experience mentoring or leading security teams.
Direct experience leading A&A/ATO efforts for large or complex systems.
Mastery of RMF, ICD 503, and IC accreditation processes.
Strong technical writing expertise, especially in SSPs, CONOPS, POA&Ms, and audit documentation.
Ability to translate complex engineering details into security artifacts and briefings.
Location: On Customer Site
PREFERRED QUALIFICATIONS
Experience supporting DoW or Intelligence Community customers.
Background in secure systems architecture or engineering.