Senior Security System Engineer

Jobright.ai

Great Falls Crossing (VA)

On-site

USD 105,000 - 110,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical insurance

Vision insurance

401(k)

Job summary

Jobright.ai is seeking a Senior Security System Engineer to lead cybersecurity efforts using the NIST Risk Management Framework for their clients. The successful candidate will advise project teams, manage security authorization processes, and ensure compliance with security standards. A strong background in cybersecurity, excellent communication skills, and a current TS/SCI clearance are required for this mid-senior level position.

Qualifications

Current TS/SCI clearance with Poly
Experience with NIST RMF and NIST 800-53
Proficiency in Cybersecurity policies and procedures

Responsibilities

Serving as a security advisor for project teams.
Conducting cybersecurity analysis and advising on risks.
Initiating the authorization and assessment process for new projects.

Skills

Critical Thinking

Multi-tasking

Communication Skills

Education

Bachelor’s Degree in Engineering or Computer Science

Job description

Join to apply for the Senior Security System Engineer role at Jobright.ai

1 day ago Be among the first 25 applicants

Join to apply for the Senior Security System Engineer role at Jobright.ai

Jobright is an AI-powered career platform that helps job seekers discover the top opportunities in the US. We are NOT a staffing agency. Jobright does not hire directly for these positions. We connect you with verified openings from employers you can trust.

Job Summary:

Oracle is an integrated cloud application and platform services company that sells a range of enterprise information technology solutions. They are seeking a Security System Engineer who will serve as the primary subject matter expert leading assessment and authorization efforts using the NIST Risk Management Framework. The role involves conducting cybersecurity analysis, advising project teams, and ensuring compliance with security requirements.

Responsibilities:

• Serve as a security advisor for project teams on all initiatives that may have an impact on security. As part this, the ideal candidate will be able to act as liaison between the project teams and key members of cybersecurity leadership.

• Initiate and drive the A&A process for all new project systems.

• Ensure all “keep-the-lights-on” cybersecurity related activities (e.g., vulnerability scans, access reviews, etc.) are performed at the frequency required to remain in compliance with accreditation requirements.

• As part of A&A preparation efforts, proactively identify potential risks associated with systems and advise on mitigation strategies.

• Drive efforts to produce appropriate artifacts to support A&A control responses.

• Identify and work with key A&A stakeholders to ensure all system documentation is kept up to date and reflects current security configurations, architecture, and data flow.

• Participate in all A&A status and technical exchange meetings (TEM) and facilitate discussions around control responses. You will be working with non-security minded team members; you must be able to explain/breakdown controls and security concepts to help the team provide you with responses. If a protective measure is not in place, you must be able to think in terms of compensating measures and processes.

• Be able to analyze, interpret, and apply changes to A&A control requirements and Federal cybersecurity guidance with respect to customer systems.

• Be able to communicate the current state, and discuss future state, security posture of customer systems to Oracle and Customer leadership and/or via designated reporting mechanisms.

• Conduct thorough reviews all vulnerabilities from malware scans, as well as architecture, and defense-in-depth strategies and report findings in POA&Ms document.

• Works with the customer counterparts directly to manage expectations, respond to tasking, quality of deliverables, and resolution to concerns.

• Understands the greater Oracle product suite and how its applied on the program.

• Hold regular technical team meetings to track progress against high priority items while ensuring framework and best practices are being followed.

• Resolve specific technical issues by coordinating appropriate resources with the customer, PMO and internally within Oracle teams as appropriate.

• Report project status to PMO and to Customers.

• Must prioritize tasking with little oversight and navigate conflicting.

Qualifications:

Required:

• MUST CURRENTLY HOLD AND HAVE THE ABILITY TO MAINTAIN A US Clearance of TS/SCI with Poly

• Experience in managing and executing system level A&A efforts using NIST RMF and NIST 800-53 to help project teams achieve and maintain Authority to Develop (ATD), Authority to Connect (ATC), and/ or Authority to Operate (ATO)

• Experience working with Cybersecurity policy, procedures, and process documentation. Experience must demonstrate your ability to: Create procedure, process, and plan documentation from scratch in alignment with customer cybersecurity and accreditation requirements.

• Perform gap assessments on existing documentation to identify missing information in alignment with control requirements. Work with system owners and system administrators to update documents with the correct language.

• Update procedures, processes, and plans in accordance with customer needs and changes in Cybersecurity federal regulations and/or accreditation requirements.

• Excellent oral and written communication skills with the ability to explain cybersecurity concepts and NIST 800-53 controls to non-technical team members and members of leadership.

• Must demonstrate proficiency in the following areas: multi-tasking, critical thinking; and the ability to work quickly, efficiently, and accurately in a dynamic and fluid environment.

• Ability to work independently and as part of a team.

• Knowledge of systems engineering as applied to defense and intelligence architectures, to include Cloud computing, PaaS, and SaaS.

• Demonstrated understanding of technical management, project delivery and execution.

• Detail-oriented with strong organizational skills.

• Proactive problem solver with a focus on continuous improvement.

• Strong oral and written communications to support interaction with multiple Oracle internal and customer organizations.

• Demonstrated experience in planning and leading Security Engineering efforts.

• Bachelor’s Degree in in engineering, computer science, or related discipline and 8+ years of relevant experience

• 3+ years’ experience analyzing and advising on securing IT infrastructures on-premise and/or in the Cloud.

• Must possess or be able to obtain and maintain a TS/SCI security clearance with Polygraph

Preferred:

Company:

Oracle is an integrated cloud application and platform services that sells a range of enterprise information technology solutions. Founded in 1977, the company is headquartered in Austin, Texas, USA, with a team of 10001+ employees. The company is currently Public Company.

Seniority level