Security Engineer with Security Clearance

This position requires U.S. citizenship and an active U.S. DoD clearance . Candidates who are not U.S. citizens are not eligible for this role. Imagine One Technology & Management, Ltd. is seeking two (2) Security Engineers. This position is contingent upon award of the associated work and will be performed in Dahlgren, Virginia. The Security Engineers will be expected to: * Author DoD Cybersecurity Assessment and Authorization artifacts. * Document a system from a Cybersecurity perspective using Microsoft Office including MS Word, MS Excel and MS Visio and other appropriate tools. * Derive, document and/or identify system CONOPS for Mission Assurance Categorization per DoDI 8500.2. * Research and recommend logical and physical solutions that prevent, detect and correct the system to be certified and accredited. * Apply DISA Security Technical Implementation Guides (STIGs) and NSA recommendations. * Identify disagreements between as built specifications, security requirements and DoD security policies and recommend approaches to bring the system into compliance. * Author and revise system requirements and specifications to meet DoD security policies. * Perform vulnerability tests as Red Team and Blue Team using manual techniques, Assured Compliance Assessment Solution (ACAS) and other similar and appropriate IA and security tools. * Plan, execute and document risk assessments against known vulnerabilities based upon security approaches and known hacker techniques and exploits. * Identify and perform security analysis of connectivity relationships between the subject US Naval warfare system and the equipment to which it interfaces, both physically and virtually. * Lead and perform as ISSO to be focal point for all security matters related to specific sets of information systems. * Define an Information Assurance Vulnerability Management (IAVM) Plan. Plan, execute and document results of security tests. * Assist with developing cybersecurity requirements, policy standards, best practices, guidance and procedures for combat systems. * Conduct cybersecurity related research, analysis and coordination activities in support of DOD cyber assurance and policy efforts at multiple classification levels. * Participate in working groups to develop cybersecurity strategies to meet emerging threats. * Develop or use MBSE models to perform cybersecurity analysis.
* Assist with: * analysis of cybersecurity, intelligence and information technology policy gaps for combat systems. * cybersecurity system engineering design, analysis and documentation of combat systems. * developing cybersecurity risk assessment analysis and risk mitigation plans for combat systems. * developing documentation of cybersecurity requirements, gap analysis, threat analysis, system engineering, risk assessment and mitigation for combat systems. Desired Experience: * Two (2) years program specific security engineering experience working with Navy afloat/tactical combat systems or five (5) years general security engineering experience. * Two (2) of the five (5) years of engineering experience on Combat Weapons Systems experience in Aegis, SSDS, Zumwalt, or other Navy afloat tactical combat systems. * Understanding of computer security, military system specifications, DoD Cybersecurity policies for both Land Based and afloat/tactical systems, and the ability to communicate clearly and succinctly in written and oral presentations. Educational Requirements: * Certified as IAT Level II or Level III per DoD 8570.01, or successor * Bachelor's degree desired Security Requirements: * Active DoD Top Secret security clearance * One (1) engineer will require a TS/SCI clearance Imagine One Technology & Management, Ltd., offers a full package of benefits and competitive salary, excellent group medical, vision, and dental programs. 401K savings plan; $4K annual tuition reimbursement ($5K if pursuing master's degree); employee training, development, and education programs; profit sharing; advancement opportunities; and much more! ISO 9001:2015, ISO 20000-1:2018, ISO 27001:2013 CMMI Development and Services - Maturity Level 3 An Employee-Owned Business EEO/Veterans/Disabled