---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Information Assurance Engineer
Location: Arlington, Virginia, United States
Type: Permanent F/T
Closing Date: 2007-12-31
ISSO
Applicants selected will be subject to a government security investigation and
must meet eligibility requirements for access to classified information. Top
Secret clearance required with the ability to get SCI access.
Ensures systems are operated, maintained, and disposed of in accordance with
security policies and practices outlined in the approved accreditation package.
• Ensures that all users have the requisite security clearances,
authorization and need-to-know, and are aware of their security
responsibilities before granting access to the IS and administers/witnesses
signed user agreements (also known as User Briefing and Acknowledgement
Statements, See Appendix C, Exhibit 12).
• Reports all security-related incidents to the ISSM.
• Initiates, with the approval of the ISSM, protective and corrective
measures when a security incident or vulnerability is discovered. Monitors
system recovery processes and ensures the proper restoration of the IS security
features.
• Develops all required C&A documentation and maintains the SSP.
• Conducts periodic reviews (self assessments), on at least an annual
basis, to ensure compliance with the SSP.
• Ensures configuration management (CM) for security-relevant IS software,
hardware, and firmware is maintained and documented. If a CM board exists, the
ISSO may be a member of the CM board, if so designated by the ISSM.
• Facilitates activities throughout the C&A process.
• Oversees system recovery procedures.
• Disseminates controls and manages the issuance of user identifications
and passwords for assigned systems and provides authorized list(s) to
appropriate system administrators for implementation.
• Ensures that system security requirements are addressed during all
phases of the system lifecycle.
• Establishes audit trails and ensures their review, and makes them
available, when required, to the ISSM. Retains audit logs in accordance with
FBI policy.
• Ensures awareness and precautionary measures to prevent introduction
and/or proliferation of malicious code.
• Manages review and release of media and/or memory components
• Performs education and awareness training for information security
concepts to all new users.
JOB REQUIREMENTS
---------------------------------------------------
Requirements:
A working knowledge of system functions, security policies, technical security
safeguards, and operational security measures. Must possess a C&A background
working with NIST standards. Must possess a background with security testing
and vulernability scanning.
CONTACT
---------------------------------------------------
To apply for this position, please visit this site and upload your resume:
http://www.cytiva.com/kcg/apply2.asp?kcg?kcg317?pcoleridge
Knowledge Consulting Group
Paul Coleridge
Sr. Recruiter
paul.coleridge@knowledgecg.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
