Vacancy expired!
Why WWT? Fueled by creativity and ideation, World Wide Technology strives to accelerate our growth and nurture future innovation. From our world class culture, to our generous benefits, to developing cutting edge technology solutions, WWT constantly works towards its mission of creating a profitable growth company that is a great place to work. We encourage our employees to embrace collaboration, get creative and think outside the box when it comes to delivering some of the most advanced technology solutions for our customers. At a glance, WWT was founded in 1990 in St. Louis, Missouri. We employ over 8,000 individuals and closed nearly $14 Billion in revenue. We have an inclusive culture and believe our core values are the key to company and employee success. WWT is proud to announce that it has been named on the FORTUNE "100 Best Places to Work For®" list for the eleventh consecutive year! Want to work with highly motivated individuals that come together to form high performance team? Come join WWT today! We are looking for a Sr. Security Engineer to join our Government Services team to support our client fully onsite in Doral, FL. Why should you join the Government Services team? Our Government Services team provides cleared resources with a global reach to federal civilian, Department of Defense (DoD) and intelligence community markets. We excel at delivering innovative, operationally ready and cost-effective IT solutions that accelerate the interoperability and resiliency of mission critical systems. Want to learn more about Government Services? Check us out on our platform: https://www.wwt.com/government-services
Location: Doral, Florida What Will You Be Doing?- Support Centrix Network from an IT Security perspective
- Oversees Network Accreditation Packages for three Networks
- Create and maintain accreditation documentation for all systems and record artifacts in eMASS
- Facilitate communication between the RMF/A&A team, technical teams, and the customer/organization
- Provide Certification and Accreditation (C&A) support in the development of security and contingency plans by conducting risk and vulnerability assessments
- Provide timely notification to the Government for any critical or high incidents impacting critical systems and services.
- Develop and/or maintain SOPs, TTPs, and White Boards associated with current knowledge of relevant technologies as assigned
- Manage Commercial Solutions for Classified (CSfC) registration and annual recertifications package accreditation (NSA)
- Change Management - Validate site security for new requirements, managed system accounts and privileges, and asset management to the three networks.
- Manage Cyber Task Orders (CTO) Management
- Evaluate IS for compliance in accordance with Risk Management Framework (RMF) 800-53 Controls, Special Directives, and other regulatory guidance
- Advise technical teams on valid Exceptions to Policy, document any security deficiencies, and track and maintain Body of Evidence in support of system risk posture
- Assess and upload RMF documentation into the Enterprise Mission Assurance Support Service (eMASS) portal
- Develop and sustain RMF Assessment and Authorization (A&A) eMASS packages to maintain Authorization to Operate (ATO) for A&A and Authorization to Use (ATU) for Reciprocity
- Assess security controls and documents in the Risk Management Framework (RMF) eMASS package, to include: the SSP, SAR, PIA, Categorization Form, Implementation Plan, Network Topology, HW/SW Listing, and Plan of Actions and Milestones (POA&Ms)
- Correspond with Government customer and system administrators to communicate any unacceptable risks identified and correct deficient RMF POA&M to meet Army and DoD standards
- Develop and submit Plans of Action and Milestones (POA&Ms)
- Develop System Security Plans (SSP) for all A&A packages
- Review and update all SOPs to be used as compelling evidence
- Support Cybersecurity IT internal and embedded inspection teams
- Review Assured Compliance Assessment Solution (ACAS) scan reports to ensure security updates are being implemented
- Ensure DISA STIGs are implemented and enforced
- Perform enterprise-wide risk analysis and vulnerability assessments
- Ensure compliance with regulations and privacy laws
- May coach and provide guidance to less-experienced professionals
- May serve as a team or task lead