DSA is seeking a Security Engineer who can attain a Public Trust clearance to join our team supporting the EPA. The EPA Office of Information Security and Privacy promotes Agency-wide cooperation in managing risks and protecting EPA information in harmony with mission accomplishment. It defines clear, comprehensive and enterprise-wide information security and privacy strategies, including the Program mission, vision, goals, objectives and performance measures.
US Citizenship is required
The Security Engineer will be an integral part of a team responsible for supporting the development and maturation of an Agency-wide information security (InfoSec) program for a large civilian Federal agency. The candidate will provide security engineering support to help the agency comply with statutory and regulatory directives from the Office of Management and Budget, the Department of Homeland Security and enhance security of the Agency’s information environment. The candidate may conduct security engineering assessments after the release of directives from national authorities, during early system design inception, and key development activities throughout the life cycle of Agency systems. Additionally, the candidate will be responsible for researching and developing security standards and designs for new capabilities to assist Agency-wide implementation.
This role allows for innovative and challenging work that will allow someone to grow professionally and have input into Agency-wide strategies and implementation of secure system design. Desire to be a part of a dynamic team, work remotely, passion for supporting Federal programs.
Location is fully remote. Possible travel to DC Client site/DSA office for badging/equipment.
Hours: 8 hours during customer core hours of 9-5pm.
Requirements include:
- US CITIZENSHIP
- Able to obtain a Public Trust Clearance
- Master's degree or equivalent and 12 years relevant security engineering experience. May substitute security certification (e.g. CISSP) for 2 years of experience.
- Excellent written and oral communication skills including the ability to communicate complex technical issues to non-technical staff.
- Experience applying, analyzing, and assessing information systems and security controls (NIST SP800-53, Revision 4)
- Possess in-depth knowledge of NIST 800-37 Rev 2 Risk Management Framework.
Primary Responsibilities:
- Evaluate functional requirements provided by OMB, DHS, or other sources and help translate into technical solutions.
- Evaluate information system security throughout the systems development life cycle.
- Prepare use cases for the development of information security capabilities.
- Analyze design constraints, trade-offs, and detailed system and security designs.
- Design control standards for hardware, operating systems, and software applications.
- Develop, disseminate, and brief detailed security design and supporting documentation.
- Provide input to cyber capabilities strategies.
Desired qualifications include:
- Professional advanced certification in cybersecurity e.g., ISC2 CISSP, CISM
- Experience applying, analyzing, and assessing information systems and security controls (NIST SP800-53, Revision 5)
Many of DSA's positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. DSA is proud to be an Affirmative Action/Equal Opportunity Employer. DSA is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All applicants will be considered for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender (including pregnancy, childbirth, breastfeeding or other related medical conditions), gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, characteristic or membership in any other group protected by federal, state or local laws. DSA requires background checks, where permitted, by law. DSA is an E-Verify Employer.#J-18808-Ljbffr