Delegated Authorizing Official Representative (DAO) 3

Base-2 Solutions, LLC.; Linthicum, Northern (MD, KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Base-2 Solutions, LLC. seeks a Delegated Authorizing Official Representative (DAO) 3 to support cybersecurity requirements, risk assessments, and control implementations for systems and networking operations. You will prepare security documentation and contribute to architecture and legacy system integration.

Required are IAM Level III certification and an active TS/SCI with Full Scope Polygraph. Experience in defensive IT strategies, risk management, and cross-domain solutions is essential.

Qualifications

• Experience in identifying security requirements and implementing information security controls.
• Ability to analyze Cybersecurity in deployed systems for operational environments.
• Prepare risk assessment, POA&Ms, authorization recommendations and security documentation.
• Coordinate with customers, IT staff, and executives to achieve Cybersecurity objectives.
• Support legacy system integration and defense-in-depth concepts.
• Knowledge of ICD 503, risk management, incident handling and security testing.

Responsibilities

• Identify overall security requirements and implement appropriate controls for data protection.
• Assist to ensure Cybersecurity functions are in the configuration management process.
• Interact with customers, IT staff, and executives to define cybersecurity objectives.
• Contribute to security architecture and legacy system integration.
• Prepare security authorization documentation and related artifacts.

Skills

IT Risk Assessor

System Security Engineer

Information Systems Security Manager

DAO (Delegated Authorizing Official)

Cybersecurity assessment

Risk assessment

Security in SDLC

Stakeholder communication

Legacy systems integration

Security concepts

DoD CWIP

IAM-3 certification

Education

Bachelor's Degree in Computer Science or IT Engineering

8+ years IT security experience with degrees equivalency

Job description

Position Summary

Base-2 Solutions is seeking a Delegated Authorizing Official Representative (DAO) 3 to support the identification and implementation of cybersecurity requirements and controls; perform security risk assessments, risk analysis, risk management, and security control assessments; prepare security authorization documentation; contribute to security architecture and legacy system integration; and support cybersecurity activities for systems and networking operations.

Essential Duties and Responsibilities

• Responsible for assisting in identifying the overall security requirements for the protection of data, to ensure the implementation of appropriate information security controls, and perform and analyze the security risk assessment, risk analysis, risk management process, security control assessments, and awareness activities for systems and networking operations.


• Provide assistance to ensure Cybersecurity functions are included in the configuration management process.


• Interact with customers, Information Technology (IT) staff, and high-level corporate officers in defining and achieving required Cybersecurity objectives for the organization.


• Contribute to building security architecture.


• Assist with the integration of legacy systems. Contribute to the acquisition/RDT&E environment and building Cybersecurity into systems deployed in operational environments.


• Prepare security authorization documentation.

Required Qualifications

• Experience as an IT Risk Assessor, System Security Engineer, Information Systems Security Manager or DAO in programs and contracts of similar scope, type and complexity, meeting an applicable education and experience pathway in the equivalency section.


• Analyze Cybersecurity built into systems to be deployed to operational environments.


• Prepare risk assessment, plan of actions, authorization recommendations, and related security authorization documentation.


• Identify and support overall security requirements for the protection of data to ensure the implementation of information security policies, activities, and controls.


• Ensure Cybersecurity functions are included in the development and risk management process, particularly those focusing on infrastructure protection and defensive IT strategy.


• Facilitate interaction with customers, IT staff, and high-level corporate officers to assist in defining and achieving required risk management objectives for the organization.


• Support integration of legacy systems within respective IT environment.


• Working knowledge of the following is required: system security design process, defense-in depth/breadth, engineering life cycle, information domains, cross-domain solutions, controlled interfaces, identification, authentication and authorization, system integration, ICD 503 (formerly NISCAP), risk management, intrusion detection, contingency planning, incident handling, configuration control, change management, auditing, security authorization process, principles of Cybersecurity (confidentiality, integrity, non-repudiation, availability, access control), and security testing.


• This is a CWIP Billet per DOD Directive 8570-1 and must meet specified certification requirements defined and documented by the TIO COR.


• An IAM 3 certification is required.

Preferred Qualifications

• None specified.

Required Education and Experience Equivalency

• Bachelor's Degree in Computer Science or IT Engineering with Eight (8) years of experience as an IT Risk Assessor, System Security Engineer, Information Systems Security Manager or DAO in programs and contracts of similar scope, type and complexity.


• No Bachelor's degree with Twelve (12) years of experience as an IT Risk Assessor, System Security Engineer, Information Systems Security Manager or DAO in programs and contracts of similar scope, type and complexity, including an additional four (4) years of experience in lieu of a Bachelor's degree.

Required Certifications

• DoD 8570 IAM Level III certification required - one of: CISM, CISSP (or Associate), GSLC, CCISO.

Required Security Clearance

• Active Top Secret/SCI with Full Scope Polygraph

Equal Employment Opportunity

Base-2 Solutions is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, age, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law, and will not be discriminated against on the basis of disability. Learn more: base-2solutions.com/eeo