Information Assurance Security Engineer

Serve as a technical Information Assurance (IA) Security Engineer supporting enterprise systems throughout the system lifecycle.

Develop, review, and maintain Information Security policies, procedures, Memorandums of Agreement (MOAs), and accreditation documentation.

Support Certification & Accreditation (C&A) and Risk Management Framework (RMF) activities in accordance with ICD 503 and customer security requirements.

Collaborate with software developers, systems engineers, project managers, and stakeholders to incorporate security into system design and implementation.

Advise engineering teams on secure architecture, security controls, and regulatory compliance throughout project execution.

Act as a representative of the Information System Security Manager (ISSM), ensuring compliance with applicable security policies and procedures.

Support the operation, maintenance, and disposition of classified information systems in accordance with approved System Security Plans (SSPs).

Develop and deliver user security awareness training and ensure users understand their Information Assurance responsibilities.

Investigate security incidents, recommend corrective actions, and coordinate mitigation activities.

Ensure enterprise hardware and software configurations comply with DISA Security Technical Implementation Guides (STIGs).

Implement and enforce Information Assurance policies and security controls documented within RMF authorization packages.

Perform Operations and Sustainment (O&S) support for enterprise network security infrastructure including firewalls, web gateways, mail gateways, intrusion detection systems, load balancers, and security management platforms.

Configure, maintain, and harden enterprise security technologies to defend against emerging cyber threats.

Perform forensic log and network traffic analysis to investigate security events and respond to escalated incidents.

Administer and maintain security monitoring platforms including ACAS, HBSS, Carbon Black, Tanium, RedSeal, EMET, and related enterprise cybersecurity tools.

Review vulnerability findings, analyze Plans of Action and Milestones (POA&Ms), and coordinate remediation efforts.

Execute vulnerability remediation activities utilizing ACAS security scan results and customer security guidance.

Support integration testing, operational readiness assessments, and system security validation.

Maintain technical documentation, architecture diagrams, security procedures, and operational standards.

Present security assessments, compliance reports, and technical findings to customer leadership and engineering teams.

Participate in Configuration Control Boards (CCBs), technical reviews, and enterprise security planning efforts.

Support multiple concurrent projects while operating effectively in a dynamic, mission-focused environment.