BAE Systems Information Security Specialist in Quantico, Virginia
BAE Systems is currently looking for an Information Systems Security Officer that will apply current information assurance (IA) technologies to the architecture, design, development, evaluation, and integration of systems and networks to maintain system security. Work closely with customers to ensure that the IA requirements are defined and implemented in a way that allows for the accreditation of the IA architecture as well as support the operational needs of the collection. Shall work with system developers and commercial product vendors in the design and evaluation of state-of-the-art secure collection systems, networks, and database products. Shall also use methods, such as encryption technology, vulnerability analysis, and security management. Shall be responsible for integration of multiple methods into a cohesive system security perimeter and environment and the policies and procedures necessary to monitor and maintain such an environment. Help prepare System Security Architecture (SSA) documentation using multiple standards such as Department of Defense (DoD) Information Technology Security Certification and Accreditation Process (DITSCAP), National Information Assurance Certification and Accreditation Process (NIACAP), Director of Central Intelligence Directive 6/3 (DCID 6/3), Common Criteria, NIST 800 series, and DOJ or FBI system policies and procedures to achieve accreditation of supported systems.
Required Education, Experience, & Skills
This position requires 5-7 years of related work experience with:
Evaluating system network or infrastructure security controls against RMF requirements
Security reviews, assessments, and analysis, such as vulnerability scans, audit logs, Plan of Action & Milestones (POA&M) and System Security Plans (SSP), for complex, operational systems.
Operating systems, network knowledge, and law enforcement collection systems, as well as information security and assurance principles, security, and privacy controls management.
Ability to assess current and evolving security threats and provide security recommendation in an operational environment for digital collection systems is required.
Extensive experience with
FISMA, Risk Management Frame Work (RMF)
System Security Plans ((SSPs)
Plan of Actions and milestones (POA&Ms)
Contingency, incident response, configuration management, and business impact analysis plans
Cybersecurity awareness, NIST SP 800-53, any additional IA tools scanning (Tennable.SC, Nessus Professional, Splunk, IA Xacta, Trusted Agent FISMA, CMAS
Understanding of networking technologies (OSPF, BGP, MPLS, IPSec)
Knowledge of information security engineering, design concepts and principles
Knowledgeable with the Systems Development Lifecycle (SDLC) and continuous monitoring methodologies
Extensive experience analyzing information technology and system risk in complex environments and articulating results (verbal/reports to all levels of management)
Preferred Education, Experience, & Skills
Preferred Experience and Education
Bachelor s degree in Computer Security or related field of study. In lieu of college level education, 6 years (or more) additional related experience.
Current certification preferred in one or more of the following IT Security disciplines:
ISACA - Certified Information Systems Auditor (CISA)
ISACA - Certified in Risk and Information Systems Control (CRISC)
ISACA - Certified Information Security Manager (CISM)
ISACA - Certified in Governance of Enterprise IT(CGEIT)
(ISC)2 - Certified Information Systems Security Professional (CISSP)
(ISC)2 - Certified Authorization Professional (CAP)
CompTIA - Certified Advanced Security Practitioner (CASP)
Information Security Specialist
EEO Career Site Equal Opportunity Employer. Minorities . females . veterans . individuals with disabilities . sexual orientation . gender identity . gender expression
- BAE Systems Jobs