DHS HSEN - Senior Security Engineer (Compliance)

Versar; Washington (District of Columbia); Remote; USD 110,000 - 140,000; Full time

Job summary

Join a forward-thinking company as a Senior Security Engineer, where you'll be pivotal in enhancing cybersecurity measures for federal networks. This role involves designing cutting-edge security solutions, ensuring compliance with NIST standards, and collaborating with diverse teams to protect critical infrastructures. You'll leverage your expertise to navigate complex security challenges and contribute to the safety of national operations. If you're passionate about cybersecurity and eager to make a significant impact, this opportunity is perfect for you.

Qualifications

• 6+ years of IT experience focusing on security compliance for federal networks.
• Strong knowledge of NIST FIPS Standards and Security Authorization processes.

Responsibilities

• Design and develop cybersecurity technology and integrate new features.
• Support DHS Security ATO and RMF compliance, ensuring documentation and audits.

Skills

Cybersecurity Compliance

NIST Standards

Security Risk Assessment

Technical Support

Documentation Skills

Education

BS in Information Systems

BS in Computer Engineering

BS in Computer Science

BS in Cyber Security

Tools

IBM AppScan

HP WebInspect

Nessus

Splunk

ArcSight

Job description

Who We Are:

Headquartered in Washington, DC, Versar Global Solutions provides full mission lifecycle solutions for challenges faced by our government and commercial customers in the natural, built, and digital environments. With nearly 2,000 team members around the world and a rich legacy spanning more than 70 years, Versar Global Solutions delivers a broad array of planning, analysis and risk management solutions, project and program management, operations and maintenance services, and information technology applications for environmental management and remediation projects, mission critical facilities and installations, and in support of readiness and contingency operations.

Who You Are:

Versar Global Solutions is seeking a Senior Security Engineer (Compliance) to support the Department of Homeland Security’s Enterprise Engineering Division (EED) within the Office of the Chief Information Officer (OCIO). This candidate will be a member of a high functioning team supporting cybersecurity countermeasures to strengthen DHS enterprise and HQ networks, overseeing and providing strategic and tactical direction with security compliance. This candidate will work directly with a team of network and security engineers, data center specialists, ISSOs, industry vendors, and DHS stakeholder groups that include 20+ DHS Components.

What You’ll Do:

This effort is responsible for providing support for the following Homeland Security Enterprise Network (HSEN) services along with Security Engineering Compliance to include:

• Design and development of cyber security technology along with integration of new architectural features into existing infrastructures while maintaining the integrity and security of enterprise-wide cyber systems and networks.
• Responsibility for DHS Security ATO and RMF compliance support ensuring systems are documented, security control implementation/documentation, self-inspection (STIG/vulnerability/compliance) auditing and issue remediation.
• Strong working relationship with ISSOs and technical teams to ensure NIST Compliance and RMF ATO Security Authorization.

Additional Duties / Responsibilities:

• Provide DHS Security Authorization Support.
• Assist and support the SOC Security Authorization Process following National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 including, but not limited to, the following elements:
  • Security Plan
  • Security Risk Assessment
  • Security Controls Assessment
  • Continuity of Operations Plan (COOP)
  • Development of POA&Ms
• Provide assistance and support to the SOC System ISSO to document and maintain the SOC Security Authorization documentation in the Information Assurance Compliance System (IACS), conduct NIST SP 800-53A, Guide for Assessing the Security Controls in Federal Information Systems assessment, and track NOSC Cyber (SOC) POA&Ms.
• Develop and document a comprehensive COOP which ensures that the Contractor maintains.
• Maintain appropriate NOSC Cyber infrastructure backups and document priorities and procedures for re-instantiating critical functions in the event of a failure.
• Test the DHS NOSC Cyber COOP capabilities in conjunction with internal test procedures and the DHS Information Technology Disaster Recovery Plan.
• Provide support to Government management by establishing POA&Ms and processes for tracking the correction of internal self-assessment and external audit findings relating to security authorization of NOSC operations and activities.

What You’ll Bring:

• BS degree in Information Systems, Computer Engineering, Computer Science, or Cyber Security, or equivalent experience.
• At least six (6) years of professional experience in an IT Services environment, providing technical support with emphasis on security compliance for federal networks.
• Prior experience with NIST FIPS Standards, Contingency Plans, Network Infrastructures, Security Impact Analysis, Privacy Impact Security Assessments & Analyses, Standard Operating Procedures.
• U.S. Federal government consulting experience preferred.
• Must be resourceful in learning a very complex and dynamically changing network.
• Must be able to work independently in a fast-paced, dynamic environment.
• Past experience within the Department of Homeland Security or other government agency is preferred.
• U.S. citizenship required and eligibility for a DHS EoD is required to be considered for this position.
• Must be proficient in English, both written and verbal, to ensure effective communication and collaboration.
• Successful results of pre-employment screenings, including federal background check, MVR, and drug screen.
• Comply with company drug and alcohol policy.

Certifications Desired:

• Security Certifications: CISSP, CCSP, CISM, GSLC, CISA, CASP, or equivalent.

Software/Hardware Desired:

• IBM AppScan, HP WebInspect, Nexpose, Splunk, Nessus, HP Fortify, McAfee SECURE, McAfee Virus Scan, Enterprise, ArcSight Sourcefire, Nagios, Saint, SolarWinds, Remedy, Primavera, Xacta, CSAM.

Location Requirements:

The position will primarily work remote; however, preference will be given to those who reside locally to the MD/DC/VA areas.

Compensation:

Expected Salary: $110,000 - $140,000 per year.

Versar Global Solutions is providing the compensation range and general description of other compensation and benefits that the Company in good faith believes it might pay and/or offer for this position based on the successful applicant’s education, experience, knowledge, skills, and abilities in addition to internal equity and geographic location. The Company reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant’s status protected by local, state, or federal law.

EEO Commitment:

Versar Global Solutions is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws.

Versar Global Solutions complies with applicable state and local laws governing non-discrimination in employment in every location in which the company operates. This policy applies to all terms and conditions of employment, including hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Versar Global Solutions expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity, marital status, amnesty, or status as a covered veteran. Improper interference with the ability of Versar Global Solutions employees to perform their job duties is not tolerated.