Security Engineer

Job Description

Job Description

This position requires U.S. citizenship and an active U.S. DoD clearance.

Candidates who are not U.S. citizens are not eligible for this role.

Imagine One Technology & Management, Ltd. is seeking two (2) Security Engineers. This position is contingent upon award of the associated work and will be performed in Dahlgren, Virginia.

The Security Engineers will be expected to:

• Author DoD Cybersecurity Assessment and Authorization artifacts.
• Document a system from a Cybersecurity perspective using Microsoft Office including MS Word, MS Excel and MS Visio and other appropriate tools.
• Derive, document and/or identify system CONOPS for Mission Assurance Categorization per DoDI 8500.2.
• Research and recommend logical and physical solutions that prevent, detect and correct the system to be certified and accredited.
• Apply DISA Security Technical Implementation Guides (STIGs) and NSA recommendations.
• Identify disagreements between as built specifications, security requirements and DoD security policies and recommend approaches to bring the system into compliance.
• Author and revise system requirements and specifications to meet DoD security policies.
• Perform vulnerability tests as Red Team and Blue Team using manual techniques, Assured Compliance Assessment Solution (ACAS) and other similar and appropriate IA and security tools.
• Plan, execute and document risk assessments against known vulnerabilities based upon security approaches and known hacker techniques and exploits.
• Identify and perform security analysis of connectivity relationships between the subject US Naval warfare system and the equipment to which it interfaces, both physically and virtually.
• Lead and perform as ISSO to be focal point for all security matters related to specific sets of information systems.
• Define an Information Assurance Vulnerability Management (IAVM) Plan. Plan, execute and document results of security tests.
• Assist with developing cybersecurity requirements, policy standards, best practices, guidance and procedures for combat systems.
• Conduct cybersecurity related research, analysis and coordination activities in support of DOD cyber assurance and policy efforts at multiple classification levels.
• Participate in working groups to develop cybersecurity strategies to meet emerging threats.
• Develop or use MBSE models to perform cybersecurity analysis.
• Assist with:
  1. analysis of cybersecurity, intelligence and information technology policy gaps for combat systems.
  2. cybersecurity system engineering design, analysis and documentation of combat systems.
  3. developing cybersecurity risk assessment analysis and risk mitigation plans for combat systems.
  4. developing documentation of cybersecurity requirements, gap analysis, threat analysis, system engineering, risk assessment and mitigation for combat systems.

Desired Experience:

• Two (2) years program specific security engineering experience working with Navy afloat/tactical combat systems or five (5) years general security engineering experience.
  1. Two (2) of the five (5) years of engineering experience on Combat Weapons Systems experience in Aegis, SSDS, Zumwalt, or other Navy afloat tactical combat systems.
• Understanding of computer security, military system specifications, DoD Cybersecurity policies for both Land Based and afloat/tactical systems, and the ability to communicate clearly and succinctly in written and oral presentations.

Educational Requirements:

• Certified as IAT Level II or Level III per DoD 8570.01, or successor
• Bachelor’s degree desired

Security Requirements:

• Active DoD Top Secret security clearance
  1. One (1) engineer will require a TS/SCI clearance

Imagine One Technology & Management, Ltd., offers a full package of benefits and competitive salary, excellent group medical, vision, and dental programs. 401K savings plan; $4K annual tuition reimbursement ($5K if pursuing master’s degree); employee training, development, and education programs; profit sharing; advancement opportunities; and much more!

ISO 9001:2015, ISO 20000-1:2018, ISO 27001:2013
CMMI Development and Services - Maturity Level 3
An Employee-Owned Business

EEO/Veterans/Disabled