Information Assurance Engineer

Description

Abacus Solutions Group:

We're built on our shared core values! We are difference-makers, passionate about serving, we work hard with integrity and do the right thing. Difference makers means that we look at every opportunity as a chance to make a difference. Passionate about serving means that we are always looking for ways to serve our customers and coworkers. Working hard and doing the right thing with integrity means that for every decision we make we first ask, “Is the decision consistent with our moral and ethical principles?" We hire, review, reward and recognize our teammates based on these characteristics, so it is important that you share these values to be part of the team.

Position Description:

Abacus Solutions Group is seeking an Information Systems Assessment and Authorization Analyst to support USTRANSCOM at Scott Air Force Base (AFB) in Illinois.  We provide strategic, technical, and program management guidance and support services to facilitate the operations and modernization of the combatant command’s infrastructure, systems, and applications. This support will be provided to the USTC Command, Control, Communications & Cyber Systems Directorate (TCJ6). 

Work Location: Scott, AFB O’Fallon, IL 

Pay and Benefits:

• $90,000 - $97,000
• Full benefits package to include medical, dental,  employer matching retirement plan, and more!
• Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience.
• Your recruiter can share more about the specific pay details.

Responsibilities 

• Develop and coordinate all authorization documentation associated including the Systems Categorization, Systems Security Plan, and Systems risk assessment.
• Manage the Authority to Operate (ATO) packages using continuous monitoring strategies outlined by the ISSM.
• Support the control assessment, reporting and monitoring processes using the Cyber Security and Assessment Management (CSAM) system.
• Create and maintain all minor/major modification documentation.
• Maintain all waivers and Risk assessment for the ISSMs.
• Assist the ISSMs with decisions that affects the security of their systems and networks.
• Facilitate preparations for all Contingency/Incident response assessments.
• Perform and document risk assessments, analyzing security vulnerabilities, and the metrics to measure the risks associated with those vulnerabilities.
• Design and development of comprehensive Systems Security Plan, covering at a high level the infrastructure, policies and procedures which define the systems security profile for the enclave      systems.
• Review and validate System Test and Evaluation (ST&E) and Interim Authority to Test (IATT) reviews for new and/or legacy systems.
• Review and conduct NIST-based Self Assessments, identifying any weaknesses which need to be addressed, and developing a Plan of Action and Milestones (POA&M) for each of those weaknesses based on industry best practices. Requesting risk acceptance for vulnerabilities that cannot be remediated or mitigated.
• Create and track Plan of Action and Milestones (POA&M) for mitigation of risks identified via the ACAS and STIG processes.
• Design and development of Initial Privacy Assessment (IPA) and Privacy Impact Assessments (PIAs) for each major Federal Government IT Systems.
• Utilize the eMass tool to manage the security profile for the system.
• Utilize the Ports, Protocols, and Service Management (PPSM) tool and processes to register ports, protocols, and services in use by the enclaves.

Requirements

 Required Qualifications:

• BA/BS
• Minimum of four (4) years of experience
• DoD Secret clearance or higher 
• Must have at least one of these IAT Level II certifications: Security+, CECCNA-Security, CySA+, GICSP, GSEC, CND, or SSCP
• Must have at least one Computing Environment (CE) certification or certificate for the technical area of responsibility for Network support/defense (e.g., Splunk, Cisco, McAfee, etc.) OR Operating System (e.g., Microsoft, Linux, Solaris, etc.)

Desired Qualifications  

• MA/MS
• ITIL V4 Foundations certification
• One of the IAM Level II certifications: CAP, CASP+, CISM, CISSP (or Associate), GSLC, CCISO, or HCISPP

Additional Details

All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations, and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.