Information Assurance Security Engineer

Jobtailor; Town of Montana (WI); On-site; USD 100,000 - 160,000; Full time

Job summary

Jobtailor is seeking a highly qualified Information Security Manager in Wisconsin to provide expert security services, policy drafts, and accreditation coordination. You will guide system design, assess architectures, and lead multi-agency security initiatives.

You will manage incident response, review logs, and supervise security engineers while collaborating with cross-functional teams to build secure IT systems across platforms.

Qualifications

• Must have Top Secret/SCI clearance and be able to obtain polygraph.
• U.S. citizenship required and 5+ years in data security administration.
• Knowledge of ICD 503; RMF process understanding; DoD 8570.1M IAM II.
• Experience with ACAS, HBSS, Carbon Black, Tanium, RedSeal, EMET.
• Unix/RHEL scripting and Windows Enterprise AD architecture knowledge.
• Familiarity with cloud AWS-based solutions and network security.

Responsibilities

• Provide expert technical services across all aspects of Information Security.
• Write information security policy drafts and review MOAs.
• Coordinate Certification and Accreditation activities.
• Advise on system design and evaluate security systems.
• Manage multi-agency information sharing and integration security.
• Perform incident response, audit log review, and remediation.
• Lead configuration control board activities and security consultations.
• Collaborate with developers, engineers, managers, and users to build secure IT systems.

Skills

Security policy development

Incident response

Cross-functional collaboration

Supervision of engineers

Network security architecture

Scripting on Unix/RHEL

Windows AD architecture

Education

Bachelor's degree in Computer Science or related field

Tools

ACAS

HBSS

Carbon Black

Tanium

RedSeal

EMET

AWS-based Solutions

VMware Virtualization

Job description

• Provide expert technical services across all aspects of Information Security
• Write information security policy drafts
• Write and review Memoranda of Agreement
• Coordinate and manage Certification and Accreditation activities
• Advise on and assess system design and architecture
• Define, design, and evaluate information security systems
• Manage multi-agency information sharing and integration security
• Perform incident response, system access approval, and audit log review
• Participate in Configuration Control Board activities and consult on security issues
• Report, document, and investigate security incidents and assist with corrective measures
• Represent the Information System Security Manager and ensure compliance with security procedures
• Operate, maintain, and dispose of information system materials according to security directives and Systems Security Plans
• Generate and implement security training and user security awareness
• Initiate protective and corrective measures for incidents and vulnerabilities
• Ensure IA hardware and software complies with security configuration guides
• Implement and enforce IA policies and procedures defined by A&A documentation
• Perform Operations & Sustainment functions for network security infrastructure, including firewalls, gateways, IDS, load balancers, monitoring tools, and management systems
• Maintain and configure equipment to protect networks from emerging cyber threats
• Conduct forensic traffic and log analysis
• Respond to escalated troubleshooting requests
• Maintain and administer network infrastructure standards, documentation, and fault tolerance
• Present monitoring, test results, and reports
• Perform or support integration testing
• Review POA&Ms and execute remediation of ACAS vulnerability findings
• Collaborate with developers, system engineers, project managers, and users to build secure IT systems
• Define, plan, design, and evaluate security system specifications and architectures
• Supervise engineers performing information security tasks
• Participate in special projects as required

Requirements

• Top Secret/SCI clearance currently required
• Must be able to obtain Top Secret SCI + Polygraph
• U.S. citizenship required
• 5+ years of related experience in data security administration
• Bachelor's degree in Computer Science or related technical discipline, or equivalent combination of education, professional training, or work experience
• Knowledge of and experience with ICD 503
• Familiarity with cloud infrastructure and AWS-based solutions
• IAM II certification required to start in accordance with DoD 8570.1M
• Understanding of the customer's Risk Management Framework (RMF) process
• Experience with security tools such as ACAS, HBSS, Carbon Black, Tanium, RedSeal, and EMET
• Experience and scripting ability on Unix and/or RHEL OS
• Experience with complex Microsoft macros and PowerShell scripts
• Basic understanding of Windows Enterprise AD architecture and VMware virtualization
• Proficiency in network routing/VLAN technology
• Ability to review POA&Ms and conduct technical decomposition, categorization, remediation, and lien resolution
• Experience installing, hardening, deploying, documenting, and troubleshooting network perimeter security technologies
• CISSP or equivalent (CAP, GSLC, CISM) desired
• System administration, network engineering, and system design/development experience desired

Demonstrates expertise in Information Security, including policy development, incident response, and compliance with security standards. Proficient in managing security systems, conducting risk assessments, and implementing security measures across various platforms.

Highest-signal resume keywords

• Top Secret/SCI Clearance
• IAM II Certification
• Experience with Security Tools
• Knowledge of ICD 503
• 5+ Years in Data Security Administration

Hard Skills

• Information Security Policy Development
• Incident Response
• Network Security Infrastructure Management
• Scripting on Unix and RHEL OS
• Network Routing/VLAN Technology
• Security System Design and Evaluation
• Forensic Traffic Analysis
• Configuration Control Board Participation
• Technical Decomposition and Remediation
• Windows Enterprise AD Architecture

Soft Skills

• Collaboration with Cross-Functional Teams
• Communication of Security Issues
• Supervision of Security Engineers

Certifications & Qualifications

• IAM II Certification
• CISSP
• CAP
• GSLC
• CISM

Industry Keywords

• Risk Management Framework (RMF)
• Certification and Accreditation
• Information Assurance (IA)
• Data Security Administration
• Cyber Threat Protection

Tools & Technologies

• ACAS
• HBSS
• Carbon Black
• Tanium
• RedSeal
• EMET
• AWS-based Solutions
• VMware Virtualization
• Monitoring Tools
• Load Balancers