Apogee Research, LLC

Security Engineer

• Ensure users follow established information security policies and procedures to protect, operate, maintain, and decommission systems and secure data in accordance with internal security policies and Department of Defense (DoD) regulations
• Interpret, review, maintain information Systems Security Plans (SSPs), Security Control Traceability Matrix (SCTM), Risk Assessment Reports, Security Control Assessment Reports, and authorizations for existing systems in accordance with DoD mandated policies
• Develop a comprehensive Risk Management Framework (RMF) package for new systems with complete body of evidence - including SSPs, Information Continuous Security Monitoring Plans, Plans of Action & Milestones (POA&Ms), architecture diagrams, and additional artifacts to support system authorization in coordination with Program Managers, Information Systems Security Manager, and Government Customer Security Control Accessors
• Participate in and support assessments of various classified and Controlled Unclassified Information networks
• Perform compliance and vulnerability scans, assist with Assured File Transfers, ensure the integrity of security configurations, and the removal of decommissioned information systems
• Develop and maintain a Plan of Action and Milestones (POA&M) for all security related vulnerabilities and provide recommendations to the ISSM on correcting vulnerabilities or implementing countermeasures associated with required security controls
• Coordinate with program stakeholders, the ISSM, Contract Program Security Officer (CPSO)/Facility Security Officer (FSO), IT Manager and team members to define, implement and maintain an acceptable information systems security posture
• Ensure information systems documentation (i.e., training records, user agreements, system baseline, SSPs etc.) are kept current
• Review and analyze system audit logs to identify anomalous activity and potential threats to controlled and secure network resources
• Provide support to the ISSM in reporting, responding to, and investigating security violations and incidents
• Conduct and monitor cyber awareness and information systems training sessions for company employees
• Participate in and support incident response and contingency planning drills; implement configuration management procedures and participate in change configuration board (CCB) reviews

Information Systems Security Officer

• Lead cybersecurity Assessment and Authorization (A&A) efforts for DoD aviation platforms
• Report to the Director of Operations and coordinate with Apogee Director and Program Manager
• Ensure operational security is maintained for information systems
• Develop and maintain relationships with DOD and Intelligence Community agencies
• Configure and secure LAN, WAN, and/or standalone machines
• Perform security audits on all systems
• Ensure procedures for responding to security compliance incidents are followed

Information Systems Security Manager – Aviation Platforms

System Administrator

• Configure, maintain, and administer a blended Linux/Windows infrastructure environment
• System deployment (Hardware assembly, OS installation and configuration, permissions configuration, and security hardening)
• System maintenance (User management, installation, configuration, and update of software, patches, and firmware)
• System optimization (Monitor system performance and health to identify opportunities for performance improvement, implement system tuning)
• Automation (Scripting routine tasks using BASH, Python, and PowerShell)
• Linux systems administration including identifying and troubleshooting issues with permissions and user rights, networking, performance and responsiveness, and system functionality problems resulting from security hardening
• Provide support and administration of security and management systems (switches, firewalls, domain controllers, virtualization stack) in accordance with expertise
• In-person, voice, and chat support to users for laptop configuration, network settings, hardware peripherals, and standard end user applications
• Configure, manage, and maintain auditing tools used in the classified spaces (Kibana or Splunk experience preferred)
• Perform system backups, Assured File Transfers, and secure decommissioning of hardware in compliance with DoD policies
• Implement and verify Security Technical Implementation Guides (STIGs) and security controls per NIST SP 800-53 for classified networks (WAN, ISOL, LAN)
• Support vulnerability scanning and remediation using approved tools (i.e., Nessus)
• Deploy and maintain log aggregators (i.e., Kibana)
• Coordinate and collaborate with the ISSO, ISSM, Contract Program Security Officer (CPSO)/Facility Security Officer (FSO), and IT teams to implement and enforce system security controls through incident reporting and investigation, system and process documentation, and establishment and maintenance of configuration management baselines
• Participate in recurring assessment activities (Incident Management Drills, Security Configuration Board Meetings, Change Control Board meetings)
• Support cyber awareness training by providing technical input on system usage and security best practices

Information Systems Security Officer

Information Systems Security Manager – Aviation Platforms

Senior Systems Administrator – Top Secret