Security Engineer

• Ensure the appropriate operational security posture is maintained for an information system
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package
• Develop physical or logical topologies for a system, assist the ISSM in meeting their duties and responsibilities
• Prepare, review, and update authorization packages
• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package
• Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change
• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly
• Ensure all IS security-related documentation is current and accessible to properly authorized individuals
• Ensure audit records are collected, reviewed, and documented (to include any anomalies)
• Attend required technical and security training (e.g., operating system, networking, security management)
• Execute the cyber security portion of the self-inspection
• Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them
• Prepare reports on the status of security safeguards applied to computer systems
• Perform ISSO duties in support of in-house and external customers
• Conduct security impact analysis activities and provide to the ISSM on all configuration management changes to the authorization boundaries
• Conduct continuous monitoring activities for authorization boundaries under your preview
• Assist Department of Defense, National Agency and Contractor organizations with all RMF efforts
• Up to 10 days of annual travel to support the program may be expected

Senior Information Systems Security Officer

Cybersecurity Professional

Assistant Facility Security Officer