Information Systems Security Engineer

Scientific Research Corporation
United States, Florida, Orlando
April 19, 2024
MINIMUM SKILLS & REQUIREMENTS: Create and maintain the RSC IATT Body of Evidence (BoE) Follow the TRMC Cybersecurity A&A Procedures to obtain IATT for the RSC. Critical Controls implementation Network Diagram(s) STIG checklists Vulnerability scans Test Procedures Manage and correspond on the Program Problem Reports (PPRs) related to cyber security tools, configuration scripts, and/or documentation for the IDE and AB baselines Work to closure of PPRs related to security and/or security controls Provide STIG checklists for the IDE and AB baselines STIG checklists will be used to validate baselines at the sites Assist in the Patch Management activities for the IDE and AB baselines Create and maintain the RM IDE Body of Evidence Follow the TRMC Cybersecurity A&A Procedures to obtain ATO for the RM IDE. Categorization Worksheet Will receive security controls list based on categorization Controls Implemented Network diagram(s) To include data flow diagram(s) Continuous Monitoring Plan Incident Response Plan Configuration Management Plan Account Management Plan Vulnerability and Patch Management Plan STIG Checklists Vulnerability scans Test Procedures SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET / SCI ELIGIBILITY ABOUT US Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients. Scientific Research Corporation offers a competitive salary, an extensive benefits package and a work environment that encourages excellence. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information. DIVERSITY & INCLUSION We strongly believe in the abundance of differences among individuals. We value different points of view and appreciate diverse perspectives. We truly believe this is what makes our organization inclusive and more responsive to the needs of our diverse customers. EQUAL OPPORTUNITY EMPLOYER Scientific Research Corporation is an equal opportunity and affirmative action employer that does not discriminate in employment. All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, or national origin, disability or protected veteran status. Scientific Research Corporation endeavors to make accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. [#CJ #LI-DG1] PRIMARY DUTIES & RESPONSIBILITIES: Responsible for developing and managing Information Systems cyber security, including disaster recovery, database protection and software development Manage security personnel to ensure that all applications are functional and secure and establish and/or satisfy information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands Will implement procedures and methods for auditing and addressing non-compliance to information security standards Will also evaluate the organization to ensure compliance with standards and relevance with industry security norms, protect against unauthorized access, modification, or destruction, and understand DoD security policies and their application Perform analysis, design, and development of security features for system architectures, provide knowledge in computer and network forensics, and analyze and define security requirements for computer systems which may include mainframes, workstations, and personal computers Perform vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle, conduct vulnerability assessments/penetration tests of information systems and develop, research and maintain proficiency in tools, techniques, countermeasures, and trend in computer and network vulnerabilities, data hiding, and encryption Identify, deter, monitor, and investigate computer and network intrusions Provide computer forensic support to high technology investigations in the form of evidence seizure, computer forensic analysis, and data recovery