System Engineer III | Scott Air Force Base | Secret Clearance Information Technology

SOC LLC; Belleville (IL); On-site; USD 43,000 - 62,000; Full time

Job summary

SOC LLC is actively seeking a Security Engineer with an active Secret Clearance for an onsite Contract to Hire role based at Scott Air Force Base. The role focuses on vulnerability assessment, risk analysis, network security, product evaluation, and security implementation.

Responsibilities include designing protective solutions, conducting security product evaluations, and maintaining authorization through RMF, ISCM, and ongoing monitoring activities. A DoD 8570 compliant mindset is essential.

Qualifications

• Expertise to develop and/or review RMF-based authorization docs for DoD.
• Experience in RMF-related TIMs and PMO security reviews.
• Coordinate with contractors and agencies to resolve security issues.

Responsibilities

• Design and implement solutions to protect confidentiality, integrity, and availability of sensitive information.
• Provide technical evaluations of IT systems and assist with security improvements; support contingency planning.
• Evaluate security products and recommend upgrades to improve security posture.
• Apply ISCM concepts and security automation for faster risk identification and authorization processes.
• Conduct testing and audit log reviews to validate current security measures.

Skills

RMF familiarity

Security engineering

Vulnerability management

Coordination with agencies

Security testing

Network security

Education

Bachelor's Degree or equivalent experience

Tools

ACAS

Nessus

Fortify SCA

eMASS

DISA STIGS

POA&M tracking

Job description

Security Engineer with active Secret Clearance needed for a Contract to Hire opportunity with SOC's direct client for an onsite role based at Scott Air Force Base.

Due to federal requirements, candidates must hold an Active DOW Secret Clearance to be considered for this role.

The Security Engineer provides technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.

Job Responsibilities

• Responsible for designing and implementing solutions for protecting the confidentiality, integrity and availability of sensitive information.
• Provides technical evaluations of IT systems and assists with making security improvements. Participates in design of information system contingency plans that maintain appropriate levels of protection and meet time requirements for minimizing operations impact to customer organization.
• Conducts security product evaluations, and recommends products, technologies and upgrades to improve the organization's security posture.
• Understands Information Security Continuous Monitoring (ISCM) concepts and the employ of security automation and risk dashboarding tools and processes to more quickly identify and respond to risk and support more efficient Assessment & Authorization processes such as ongoing authorization.
• Conducts testing and audit log reviews to evaluate the effectiveness of current security measures.

Job Qualifications

• Expertise to develop and/or review system authorization documentation in accordance with DoD implementation of the Risk Management Framework (RMF)
• Experience participating in TIMs on a wide range of PMO security engineering meetings
• Experience participating in Acquisition program Engineering Milestone Reviews,
• Experience coordinating with development Contractor security/system engineers and USTRANSCOM/DISA Security Office to resolve program security issues
• Possess skills to conduct Technical Reviews of development Contractor produced security deliverables.
• Experience performing security activities to maintain authorization of the PMO programs
• Experience using the DOD Enterprise Mission Assurance Support Service (eMASS) system
• Experience providing support to ensure PMO system(s) are designed, developed, and deployed in accordance with applicable Executive Orders, Federal Policy, DOD regulations, USTRANSCOM requirements, and commercial best practice
• Experience performing vulnerability scans using ACAS, Nessus, and Fortify SCA, analyze outputs to identify vulnerabilities, and recommend mitigation and remediation actions
• Experience implementing DISA STIGS and verifying application
• Experience writing and tracking POA&Ms
• Experience conducting and evaluating security testing activities including security assessments, audits, and penetration testing
• Experience supporting operational security activities e.g., firewall implementation, risk mitigation, host security, encryption, intrusion detection, Virtual Private Network (VPN) implementations, and viral detections
• Experience with security lockdown and/or hardening of servers and network devices
• Ability to coordinate overall security strategy with multiple agencies, Authorizing Official (AO) representatives
• Ability to coordinate with developers, vendors, and other government organizations/agencies to assess security engineering issues
• Experience recommending changes to network and security architecture to improve security posture and meet operational performance requirements

Job Requirements

• Bachelor's Degree or equivalent experience
• DoD 8570 compliant certifications: IAT I, IAT II, IAM I, IAM II.
• 7+ years' experience in security engineering
• Active DOW Secret Clearance or higher determination

Employment Prerequisites

The following requirements must be met to be eligible for this position: successful completion of a background investigation and drug urinalysis.

SOC, a Day & Zimmermann company, is an Equal Opportunity Employer, EOE AA M/F/Vet/Disability.

Note: Any pay ranges displayed are estimations, which may have been provided by job boards. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description.

#INDSOC

Estimated Min Rate: $31.50

Estimated Max Rate: $45.00