Cyber Security Systems Engineer

Arcfield was purpose-built to protect the nation and its allies through innovations in digital transformation, space mission engineering and launch assurance, miniaturized sensors and satellites, advanced modeling and simulation, cybersecurity, and conventional and hypersonic missile support. Headquartered in Chantilly, VA with 16 global offices, Arcfield employs more than 1,500 engineers, analysts, IT specialists, and other professionals with more than 60 years of collective proven experience supporting missions in cyber and space defense, space exploration, hypersonic and nuclear deterrence and warfighter readiness. Visit arcfield.com for more details.

In this customer-facing, team-oriented position, the contractor will support the Sponsor's organization responsible for coordinating security internet capabilities for mission. This includes performing IT security engineering support across the Sponsor's program. Responsibilities for the position include but are not limited to the following:

• Lead and plan for new technology insertion by keeping up with new technologies and capabilities such as encryption, transport, networking, and routing, among other things.
• Support the development or modification of System Security Plans (SSPs), security requirements, and other supporting documentation for the Assessment and Authorization process.
• Assist projects in determining their security requirements by analyzing each project's business needs and help evaluate industry offerings to identify products that meet security requirements.
• Work with stakeholders to create and perform quality control on Sponsor's RMF body of evidence documentation.
• Review assessment reports and assist projects in identifying security risks (technical and non-technical) and developing effective mitigation strategies such as Plans of Action and Milestones (PoAMs).
• Ensure the project completes mitigation strategies as scheduled to ensure timely delivery to customer.
• Provide security review and approval for changes to accredited systems, such as installation of new software and opening new ports, and determination of Security Relevant Changes.
• Provide security review of network firewall changes.
• Provide feedback for Sponsor computer incident team to resolve cyber incidents.
• Provide input to improve group processes by recording lessons learned and creating standard operating procedures.
• Ensure all products and administrative documentation is completed and maintained in order to ensure continuity and historical reference.
• Ensure deliverables meet all relevant quality and security standards.
• Maintain the scanning software, keeping it patched and accessible to the Sponsor's systems to meet the scanning requirements.

ADDITIONAL SECURITY REVIEW PROCESS

All personnel joining the organization undergo an additional security review that can take anywhere from 7 business days to 45 days or more.

Required:

• Must possess and be able to maintain TS/SCI clearance with Polygraph.
• A degree (or equivalent experience) in Computer Science, Information Systems, Engineering, Business, or a scientific or technical discipline. BS 10-12, MS 8-10, PhD 5-7 years of experience
• The ability to analyze systems, including forensically, for malware, misuse, or unauthorized activity.
• Knowledge of investigation and analysis of all data sources, which may include Internet, Intelligence Community reporting, security events, firewall logs, forensic hard-drive images, and other data sources to identify malware, misuse, unauthorized activity or other cyber security related concerns.
• Knowledge of computing design concepts and implementation.
• Knowledge of network defense monitoring and systems.
• Demonstrated experience with the Sponsor's Authorization and Accreditation (A&A) process and the Risk Management Framework (RMF).

Desired:

• Master's degree
• Minimum of 15 years' experience.
• Minimum of 3 years' experience in the Intelligence Community.
• Ability to provide technical cyber security guidance.
• Ability to convey technical information to non-technical individuals.
• Ability to create complex system designs, resolve engineering problems, and propose preventative strategies.
• Ability to work in a dynamic and challenging environment.
• Strong oral and written communications and interpersonal skills.
• Demonstrated experience with the Sponsor's diverse information technology infrastructure including operating systems, major application systems, and network architecture.
• Demonstrated experience with encryption, operating systems, databases, and networking (routing, switching, firewalls, and data protection), along with familiarity in cloud computing, information storage, and virtual machines.
• Demonstrated ability to assess and mitigate cyber risks, exploits, and vulnerabilities; conduct security reviews; apply security best practices; develop information security policies; manage enterprise-level security risks; make timely, fact-based decisions; and clearly convey the rationale to customers and team members.
• Certification:
  • Certified Information Systems Security Professional (CISSP) or
  • Government Security Engineer Certification (GSEC)

We are an equal opportunity employer and federal government contractor. We do not discriminate against any employee or applicant for employment as protected by law.