Cyber Security SME

Location

US-DC-Washington

ID

2025-1992

AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test & Evaluation, Program Mission Support, Engineering & Analysis, and Training.

As a Cybersecurity Engineer with AMERICAN SYSTEMS you will have an opportunity to do the following:

Join us at an exciting time as we introduce next-generation technologies
• Be part of a group that provides game-changing capabilities to the nation
• Assist System Security Engineering (SSE) Managers with navigating DoD and DoN CS processes to include Committee on National Security Systems Instruction (CNSSI) 1253 and Joint Special Access Program Implementation Guide (JSIG) Risk Management Framework (RMF) implementations upon request
• Provide dedicated Assessment and Authorization (A&A) support services as defined in the DoD/DoN Risk Management Framework (RMF)
• Assist the customer in transitioning system security documentation from the existing JAFAN 6/3 terminology to the Risk Management Framework (RMF) terminology
• Conduct in-depth technical reviews of Assessment and Authorization (A&A) documentation from system integrators/developers supporting the PO to achieve successful Authorizing Official (AO) decisions in support of Authority to Operate (ATO) milestones IAW JSIG and NIST SP 800-137 Continuous Monitoring Requirements
• Conduct PO security control assessments of System Integrator/developer submitted A&A documentation to ensure compliance with RMF requirements
• Generate and submit PO A&A documentation required for submission of PO DoN Security Authorization (SA) packages
• Create/review the System Security Plans (SSP), Security Control Traceability Matrix (SCTM), Plan of Action and Milestone (POA&M), OPSEC Plans, Cybersecurity Test Plan/Reports, IA Vulnerability Management Plans, and Risk Management Plans to ensure documentation/artifacts are in compliance with RMF requirements
• Ensure that all PO cybersecurity-related documentation is current and accessible to properly authorized individuals; maintain the A&A package repository
• Implement/monitor Program Office (PO) continuous monitoring Plans/strategies to ensure compliance with DoN Cybersecurity policy.
• Ensure site compliance with cybersecurity inspections, assessments and reviews are synchronized and coordinated with affected parties and stakeholders as appropriate, and review/archive the documented results in support of Program level continuous monitoring Plans
• Prepare and update of the IA/CS components of various milestone decision support documents such as but not limited to the Systems Engineering Plans (SEP), Test and Evaluation Management Plans (TEMP) and Test and Evaluation Strategies (TES), and Integrated Logistic Support Plans (ILSP)

EEO Race/Sex/Disability Status/Veteran Status