CSSP Engineer/Architect, SME P31-P34

FEDITC LLC•Indianapolis, IN

13d•Onsite

About The Position

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission critical national security systems throughout the world directly supporting the Warfighter, DoD Leadership, & the country. We are proud & honored to provide these services. Overview of position: We are looking for a CSSP Engineer/Architect, SME to work in Indianapolis, IN. An active Top Secret / SCI (TS/SCI) clearance and United States Citizenship are required to be considered for this position.

Requirements

10+ years cybersecurity engineering experience
CISSP-ISSEP certification demonstrating security engineering expertise
DoD 8140 A-531-4417 Cyberspace Effects Playlist qualification
Expert knowledge of IDS/IPS, ESS, ACAS, and penetration testing tools
Experience with SIEM solutions (ArcSight, Splunk)
Network forensics and traffic analysis expertise
Experience with CSSP accreditation processes
Knowledge of JFHQ DODIN and Cyber Command reporting requirements
Experience engineering solutions for NIPRNet, SIPRNet, and JWICS
Active Top Secret/SCI clearance is required.
Must be a United States Citizen and pass a background check.
Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).

Nice To Haves

GIAC certifications (GPEN, GWAPT, GCIH)
Experience with DFAS CSSP operations
Prior DoD Cyber Command experience
Penetration testing certifications (OSCP, CEH)
Experience with DoD CSSP Evaluators Scoring Metrics
Zero Trust architecture implementation experience
Cloud security engineering experience

Responsibilities

Lead CSSP engineering team for security infrastructure technologies
Engineer network perimeter defense appliances and SIEM toolsets
Operate CSSP-specific toolsets (IDS/IPS, ESS, ACAS, penetration tools, traffic monitoring, network forensics) for unclassified and classified enclaves
Develop and maintain Cybersecurity Plan (due 30 days after start of period of performance)
Ensure 100% corrective action plans reported and completed for weaknesses identified
Maintain 100% compliance with JFHQ DODIN/Cyber Command reporting requirements
Perform security review of all new equipment deployed on CCE enclaves achieving 95% CAT 1&2 compliance
Ensure 100% STIG compliance for new deployments
Operate and maintain CSSP accreditation achieving 3-year accreditation
Align all technologies with Zero Trust architecture where applicable