Senior Assurance and Cyber Security Engineer

ATI builds and manages collaborations conducting research and development of technologies for the federal government. The Senior Assurance and Cyber Security Engineer supports enterprise-wide information security, protects ATI’s information assets, and helps develop, implement, and maintain security controls, compliance, and incident-response capabilities.

Responsibilities:

• Serves as a key contact person (365x24x7) for Information Security Issues; may work extended hours to lead and resolve highly complex security problems that impact critical applications and provide required coverage during testing, system and software upgrading, emergency, disaster recovery, and/or remote response situations
• Provides hands-on support and expertise necessary to protect ATI’s infrastructure and data assets
• Ensures the security, confidentiality and integrity of ATI’s applications, systems and data by creating and maintaining a comprehensive security plan to include protocols, policies, procedures, and performance metrics
• Ensures that governmental regulatory requirements are addressed and followed by all ATI employees and subcontractors. This may include visiting sub-contractor sites to ensure compliance with requirements such as NIST, DFARS, GSA, NOFORN and other regulatory requirements as it pertains to ATI’s projects and programs
• Ensures projects are delivered on time and within scope and budget
• Prepare documentation and security artifacts based on industry standard guidelines; defines procedures to confirm/maintain compliance with regard to NIST SP 800-171/NIST SP 800-53 and relevant DFAR clauses such as 252.204-7012 and compliance frameworks such as CMMC (Cybersecurity Maturity Model Certification)
• Analyze existing policies and procedures for compliance with Federal laws, regulations, and standards; recommend remediation strategies to close security gaps
• Demonstrated experience performing Information System Security Officer (ISSO) or Information System Security Manager (ISSM) duties in a Federal or regulated environment, including creating and maintaining RMF documentation, SSPs, POA&Ms, security test plans, and continuous monitoring artifacts
• Recommend system enhancements to address identified deficiencies and improve the overall security posture
• Design, test, and integrate computer and network security tools; secure system configurations and ensure compliant deployments
• Perform system scans, interpret results, and support system administrators in resolving findings
• Conduct internal security program audits and develop mitigation strategies to address identified risks
• Documents and develops in-depth know how of company’s existing IT architecture/infrastructure and technology portfolios; provides technical assistance to all team members, as needed
• Participates in security assessments and analysis to identify existing and potential areas of vulnerability; analyzes and assesses current and future threat landscapes and reports to senior management with realistic overviews
• Supports the development of strategies to mitigate risks; researches, evaluates, designs, tests, recommends and plans the implementation of new or updated information security hardware and/or software and analyzes the impact to the existing environment
• Support security incident investigations, root-cause analysis, and response
• Helps define and meet key metrics to measure the effectiveness of security controls; develops strategies and implements actions to improve protections
• Ensures that responsibilities, authorities, and accountabilities of all ATI employees with regard to Information Security are defined and understood by regularly communicating to all-associate meetings, regularly generated e-mails, in addition to other mediums of communication
• Supports the establishment of information security operational and capital budgets
• Plans and executes cyber exercises to ensure company awareness and readiness in the event of a cyber-incident
• Oversees IT Security project implementations
• Functions as senior subject matter expert related to ATI security technologies
• Other duties as assigned

Requirements:

• BS in Computer Science or Information Systems
• Minimum of 5 years of successfully progressive experience in IT security
• CISSP or equivalent Cyber Security certification
• Demonstrated experience with Splunk or other SIEM
• Experience with encryption technologies with the ability to utilize tools for network traffic analysis
• Experience with Azure security
• Experience with Next Generation Firewalls (Palo Alto, Cisco Firepower)
• Previous experience in the design and implementation of enterprise information security policies, processes, and procedures
• Knowledge of NIST Cyber Security standards to include NIST 800-171, NIST 800-53
• Experienced in IT control areas including change management and System Development Life Cycle
• Demonstrated experience functioning in an Incident Response Team during a rapidly evolving security incident
• Influences decisions at an organizational level on procedures and standards for extremely complex and diverse data processing and communications network; acts with high degree of independence to establish and modify priorities
• Works in highly sensitive, vulnerable, high risk area. Has access to high impact security interfaces
• Demonstrated experience in communicating effectively in written and spoken form to broad internal and external entities including non-technical executives, corporate officers, employees, product and service vendors
• Prior supervisory experience or team lead
• U.S. Citizenship required, must be able to possess and maintain a DOD security clearance
• MS
• Splunk Enterprise
• Azure Firewall
• preferred to already possess a SECRET Clearance