Satellite Communications Systems Security Engineer, Mid

Booz Allen Hamilton•Annapolis Junction, MD

12h

About The Position

Are you seeking an opportunity to enhance your expertise in satellite communications systems, including devices, implanting security systems, and identifying tools that will support our country and safeguard our nation? As a Satellite Communications Systems Security and Network Security Engineer, you will identify the necessary tools, security systems, devices, and applications required to assess vulnerabilities and recommend optimal solutions and security strategies. Your experience is needed to develop and implement security solutions that protect our military and infrastructure. Join a team of communications and systems engineers supporting engineering, sustainment, and management of communications systems. You’ll perform ongoing system analyst activities for programs, perform risk assessments of systems and equipment, assist engineers with identifying solutions for vulnerabilities, create and map Security Technical Implementation Guides ( STIGs ) , submit change requests for system components, develop a Plan of Action and Milestones ( POA & M ) , create documentation supporting Risk Management Framework ( RMF ) accreditations, perform vulnerability management using automated systems, and create and submit RMF packages. You’ll brief the technical security posture to client leadership, prepare brief slides and summaries of vulnerabilities, and advise on how to prevent and mitigate future security threats. In this role, you’ll closely impact a national security level communications system that provides vital information to strategic and tactical users of the DoD Teleport system. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers.

Requirements

3+ years of experience developing, testing, validating, and implementing STIG requirements for systems, c ond ucting periodic self-assessments of systems to ensure STIG compliance, and creating STIG checklists to support periodic self-assessments
3+ years of experience performing IAVM activities such as IA Vulnerability Alerts (IAVA), bulletins, tasking orders, and technical advisors, to develop a systematic approach for responses to IAVM issues impacting system security posture, and developing engineering solutions and coordinating responses with cybersecurity leadership to ensure system security solutions are compliant
3+ years of experience implementing and validating technical solutions for Endpoint Security Solutions ( ESS ) , Assured Compliance Assessment Solution ( ACAS ) , and Continuous Monitoring and Risk Scoring ( CMRS ) for capabilities, including assessing ACAS scans, developing engineering strategies for vulnerability remediation, documenting assessment results and mitigations in vulnerability management reports, and testing and deploying patches or upgrades required for vulnerability remediation
3+ years of experience reviewing and validating engineering and cybersecurity change requests to ensure proposed changes will not negatively affect system operational availability and meet security compliance requirements
Knowledge of RMF and its applicability to network and IT infrastructures such as Cisco routers, switches, active directory, and access control
Ability to perform user management in Windows or Linux operating system, and virtual machine management with VMware or Micro sof t Hyper-V
Ability to execute, analyze, secure, and accredit DoD communication systems using RMF met hods and techniques, perform IAVA analysis and resolution, document POA & Ms, and create security documents necessary for assessments
Top Secret clearance
Bachelor’s degree in a Science, Technology, or Engineering field
Security+ Certification

Nice To Haves

Possession of excellent verbal and written communication skills
Cybersecurity Certification such as CISSP or Certified Ethical Hacker Certification, or Networking Certification such as Network+ or Cisco Certification

Responsibilities

Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
Perform risk and vulnerability assessments in network, system, and application areas.
Leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
Participate in the development of test strategies and c ond uct of testing, validating, and implementing applicable STIG requirements for current or new systems.
C ond uct periodic self-assessments of systems to ensure STIG compliance.
Create STIG checklists to support periodic self-assessments.
Perform Information Assurance Vulnerability Management ( IAVM ) activities such as IA vulnerability alerts, bulletins, and tasking orders.
Develop a systematic approach for responses to IAVM- related issues, to maintain system compliance.