General Dynamics C4 Systems
-
Arlington,
Virginia
14496-01
General Dynamics C4 Systems is a leading provider of secure communications and information solutions, products, services, and technologies. From large scale, mobile, ad hoc and self healing networks such as Warfighter Information Network-Tactical (WIN-T) to state-of-the-art software defined radio products such as Joint Tactical Radio Systems (JTRS), and complex software applications, General Dynamics provides a full spectrum of products and services including integrated logistical support. Our successes, in tactical and strategic environments, have made us a market leader in designing, developing, and deploying mission-critical information networks, systems and technologies. General Dynamics is also a leading provider of integrated solutions for satellite communication and operations, homeland security, detection, surveillance, intelligence and emergency response. General Dynamics has a highly trained, multidisciplinary staff who apply their experience and skills along with mature design and development processes to produce products and services that set the global standard in secure ground, air and space communications and networking solutions.
General Dynamics C4 Systems is a diverse and growing business. We are currently seeking an Information Assurance Officer for the Arlington, VA operations. The selected candidate will be responsible for the oversight of the operations necessary to securely integrate and apply DoD/DARPA missions, organization, function, policies and procedures within classified network enclaves per DoD and IC regulations and requirements. Responsibilities include:
- Developing and maintaining a formal Information Systems Security Program.
- Implementing and enforcing IS security policies.
- Ensuring systems are operated, maintained and disposed of in accordance with internal security policies and practices outline in the Designated Approval Authority approved certification and accreditation package and/or security plans.
- Ensure system users have the requisite security clearances, authorizations, and need to know and are aware of their security responsibilities before granting access to the IS
- Reporting all security-related incidents to the ISSM
- Initiating, with the approval of the ISSM, protective or corrective measures when a security incident or vulnerability is discovered.
- Develop and maintain and SSP as described in Appendix C of DCID 6/3 for SAP/SCI systems and for Collateral Systems.
- Conduct periodic reviews to ensure compliance with the SSP
- Ensure Configuration management (CM) for security-relevant IS software, hardware, and firmware is maintained and documented.
- Active member of the CM board is so designated by the ISSM.
- Ensure all IS security-related documentation is current and accessible to properly authorized individuals.
- Formally notify the ISSM and the DAA when systems no longer process intelligence or SAP information.
- Formally notify the ISSM and the DAA when changes occur that might affect accreditations.
- Ensure system security requirements are addressed during all phases of the system life cycle.
Follow procedures developed by the ISSM, authorizing software, hardware and firmware use before implementation on the system
- Maintaining, as required by the ISSM, a repository for all system certification documentation and modifications.
- Coordinated IS security inspections, tests and reviews.
- Ensure proper protection of corrective measures have been taken when an incident or vulnerability has be discovered within a system.
- Ensure data ownership and responsibilities are established for each IS, to include accountability, access rights and special handling requirements.
- Ensure development and implementation of an information security education, training and awareness program.
- UNIX audit review,analysis and reporting required.
Education and Experience
BSCS, BSCE, BSSoftE + 5 years of demonstrated results, or equivalent experience
Must be able to travel 20% of the time.
Secret level U.S. DoD security clearance, and U.S. Citizenship is required.
Applicant must be able to pass an extended background investigation (EBI) for this position.
Applicant must have an “active” TS/SCI clearance. Applicant must be a US Citizen.
Applicant must meet DoDD 8570.1 certification requirements for IAT-III and CND-AU. Applicant must possess the experience with vulnerability scanning and testing tools such as Rentina and the DISA Gold Disk. Conform to policy and only access data, control information, software, hardware and firmware using the appropriate privileges/roles for which need to know has been established. Applicants must have a working knowledge of security policies, technical safeguards and must be able to take appropriate security measures. Appliciant must be proficient in UNIX audit analysis and have experience in documenting detailed security audit events.
Applicant must have a working knowledge of Unix OS functionality and command line input. Candidates must be willing to travel in support of business needs. Applicant must be able to meet specific SAP/SAR eligibility requirements. Consent to a Counter-Intelligence polygraph will be required.
Arlington, VA
Arlington, Virginia
|
|