Security Engineer/Data Security Analyst III
Role summary
The Security Engineer/Data Security Analyst III is responsible for conducting in-depth research on security engineering policies and processes, developing and documenting security solutions, and performing system scans. This role requires expertise in the Risk Management Framework (RMF), including NIST standards and tools like Xacta and eMASS, to ensure systems meet security requirements for confidentiality, integrity, and availability. The position also involves applying IT security controls and potentially supporting cloud environments. A Top Secret with SCI clearance, a relevant BS/MS degree, and a DoD 8570/8140 IAM or IAT Level III Certification are mandatory. Experience with Windows, Linux, and DoD/USAF Cloud is desired.
### Location: Lackland AFB, San Antonio, Texas
PRIMARY DUTY RESPONSIBILITIES:
- Conduct timely and in-depth research for policies and processes applicable to security engineering.
- Develop solutions and recommendations (with test plans) and provide POA&M and documentation support.
- Assessment methodologies
- Governance, Risk, and Compliance (GRC) platforms
- Risk Assessment Reports (RARs)
- Assessment and Authorization (A&A) workflow tools data
- Patch management
- IA Vulnerability Alerts (IAVA)
- Memorandums
- Interim Authorization To Test (IATT)
- Critical Design Review (CDR)
- Continuous Monitoring Review (CMR)
- Authority To Operate (ATO)
- Perform scans of systems and architectures using AF IC -approved scanning tools and related AFJWICS bases and stations ideal.
- Apply IT security control requirements to address the level of security required to protect the confidentiality, integrity and availability of system data and resources.
- Ability to support global travel when needed for assessment support.
Security Clearance: Top Secret with SCI.
Education/Certifications: BS or MS degree in IT-related field and DoD 8570/8140 IAM or IAT Level III Certification required.
Relevant Experience:
- 4 – 5 years of experience with solid proficiency in use of Risk Management (RMF) methodology, its associated assessments and report requirements, understanding of the plans and policies, and conduct timely and in-depth research for policies and processes applicable to security engineering.
- Solid knowledge and experience with the NIST 800 Risk Management Framework (RMF) NIST 800 series 800-37 Rev 2, 800-53 Rev. 5.
- Demonstrated expertise in RMF processes and tools such as Xacta and eMASS, ensuring systems and applications to meet both AF IC and related IC policies and regulations.
- Ability to apply IT security control requirements to address the level of security required to protect the confidentiality, integrity and availability of system data and resources.
- Technical knowledge and experience system networking, Windows, Linux, and DoD or USAF Cloud desired.
### More Information
- Experience Level Senior