Criterion Systems

Experience with one or more software development environments supporting commercial or open-source tools including but not limited to Linux, Python, C, Bash Scripting, Perl, SQL, Splunk Phantom, UBA, and UiPath. Experience in one or more cloud computing services and technologies including but not limited to AWS/C2S, Microsoft Azure, Nutanix, VMware. We are seeking an Information Security Compliance and Assessment Specialist to join a U.S. Department of Energy, National Nuclear Security Administration contract in Albuquerque, NM.. Ensuring the implementation of DOE and NNSA cyber security policies and procedures for information systems. Active Top Secret Clearance, SSBI (Single Scope Background Investigation) with the ability to upgrade to a Department of Energy (DOE) “Q” Clearance or an active DOE "Q" clearance

security systems engineer

At Criterion Systems, we developed a different kind of business—a company whose real value is a reputation for excellence built upon the collective skills, talents, perspectives, and backgrounds of its people. By accepting a position with Criterion Systems, you will join a group of professionals with a collaborative mindset where we share ideas and foster professional development to accomplish our goals. In addition to our great culture, we also offer competitive compensation and benefit packages, company-sponsored team building events, and advancement opportunities. To find out more about how Criterion can help you take your career to the next level please visit our website www.criterion-sys.com. Criterion Systems is a Military/Veteran Friendly Company therefore we encourage Veterans to apply. We are seeking a mission-focused Information Security Systems Engineer with experience working on Intelligence Agency enterprise infrastructure and engineering programs to support and contribute to our government customer’s success in Herndon, Virginia! ***ACTIVE (FULL) SECURITY CLEARANCE REQUIRED*** This position is on a program that delivers engineering services for network infrastructure as well as sophisticated enterprise computing infrastructure including end-point devices, data center hosted servers, multi-Cloud services as well as virtualized applications, and storage systems. <ul><li>Enterprise Computing Engineering services include modern application technology including containerized solutions with orchestrated work-flow that function both on customer premises, and via remote Cloud services. </li><li>Network infrastructure engineering services are comprised of core infrastructure, voice and video engineering, field engineering, application management and development for networks, network analytics, firewalls, network access controls and bandwidth service delivery. </li></ul>Required Experience, Education, Skills & Technologies <ul><li>An active TS/SCI with an adjudicated Polygraph</li><li>Five (5) years or more of experience working on Intelligence Agency enterprise infrastructure and engineering programs</li><li>Ability to produce risk data/artifacts (e.g., architecture documentation and Systems Security Plans (SSP)) for submission to an Information Systems Security Manager (ISSM) for risk analysis and decision making</li><li>Ability to coordinate with customer security organizations to achieve Authority to Develop (ATD) and Authority to Operate (ATO) </li><li>Experience with POA&M development and implementation</li><li>Ability to ensure implementation and validation of security controls that support the Risk Management Framework (RMF) and ICD 503 Security Accreditation</li><li>Knowledge of STIG compliance and vulnerability management</li><li>Ability to analyze technical content to determine if it meets the customer's defined security requirements</li><li>Knowledge of the complex environment involving shared networks and multiple security enclaves</li><li>Knowledge of engineering for Cyber engineering and integration services including security, authentication, identity management, authorization, and access control engineering</li><li>Self-starter able to work independently and build relationships with technical reps across divisions, comfortable with cyber security and able to brief issues to the customer</li><li>Outstanding written and oral communications skills </li></ul>Preferred Experience, Education, Skills & Technologies <ul><li>Experience with Rapid7 or similar</li><li>Familiar with Security Development and Operations (SecDevOps)</li><li>Experience with security tools and processes such as GreenLight, Xacta, WebInspect</li><li>Experience with cloud security controls and implementation </li><li>CISSP AWS Certified </li><li>Microsoft Office365</li><li>Experience in one or more software products associated with cyber system engineering for data analytics including SQL security, TANIUM Endpoint Management Software, PowerShell, MacAfee, App Blocker, Splunk ITSI</li><li>Experience with one or more software development environments supporting commercial or open-source tools including but not limited to Linux, Python, C, Bash Scripting, Perl, SQL, Splunk Phantom, UBA, and UiPath</li><li>Experience in one or more cloud computing services and technologies including but not limited to AWS/C2S, Microsoft Azure, Nutanix, VMware </li></ul>Security Clearance Level <ul><li>TS/SCI with an adjudicated polygraph (fully cleared) </li></ul>Certification <ul><li>None </li></ul>Work Schedule <ul><li>Full-time on-site at a designated facility </li></ul>Benefits Offered <ul><li>Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, 401(k) match, Tuition/Training Assistance, Parental Leave, Paid Time Off, and Holidays. </li></ul>Criterion Systems, LLC and its subsidiaries are committed to equal employment opportunity and non-discrimination at all levels of our organization. We believe in treating all applicants and employees fairly and make employment decisions without regard to any individual’s protected status race, ethnicity, color, national origin, ancestry, religion, creed, sex/gender, gender identity/gender expression, sexual orientation, physical and mental disability, marital/parental status, pregnancy (including childbirth, lactation, and related medical conditions), age, genetic information (including characteristics and testing), military and veteran status, or any other characteristic protected by law. For our complete EEO/AA and Pay Transparency statement, please visit https//careers-criterion-sys.icims.com/. At Criterion Systems, we developed a different kind of business—a company whose real value is a reputation for excellence built upon the collective skills, talents, perspectives, and backgrounds of its people. By accepting a position with Criterion Systems, you will join a group of professionals with a collaborative mindset where we share ideas and foster professional development to accomplish our goals. In addition to our great culture, we also offer competitive compensation and benefit packages, company-sponsored team building events, and advancement opportunities. To find out more about how Criterion can help you take your career to the next level please visit our website www.criterion-sys.com. Criterion Systems is a Military/Veteran Friendly Company therefore we encourage Veterans to apply. We are seeking an Information Security Compliance and Assessment Specialist to join a U.S. Department of Energy, National Nuclear Security Administration contract in Albuquerque, NM. In this role, you will serve as a Quality and Compliance Advisor on all matters involving the security of internal information systems. You will have the detailed knowledge and expertise required to provide management with the information and tools to ensure conformance to requirements and improve information assurance quality processes of the organization. You will identify and define areas of non-conformance to requirements and security policies and procedures through ongoing monitoring and assessments. Duties, Tasks & Responsibilities <ul><li>Ensuring the implementation of DOE and NNSA cyber security policies and procedures for information systems</li><li>Performing process and system evaluations (assessments) to ensure compliance with established policies, processes, procedures, and applicable standards</li><li>Validating security control assessments results</li><li>Performing a variety of technical and administrative activities related to the function of QA (auditing), including, but not limited to, scheduling, checklist development, report writing, facilitating root cause/lessons learned analysis, and internal/external presentations</li><li>Compiling, analyzing, and reporting on findings of non-compliance and providing recommendations for improvement</li><li>Capturing and maintaining plans of action and milestones on findings of non-compliance</li><li>Tracking and escalating unresolved non-compliance issues and corrective and preventative action plans to closure</li><li>Validating cyber security tests and assessments are conducted in accordance with established policies and procedures</li><li>Formally and informally presents information in group and individual settings </li></ul>Required Experience, Education, Skills & Technologies <ul><li>U.S. Citizenship (NO dual-citizenship)</li><li>Bachelor’s Degree in a related field with appropriate background and knowledge of current industry technologies/standards for enterprise networks. Prior experience in information security/information assurance roles in may be substituted for education requirements (e.g., implementing and managing FISMA, FedRAMP, DoDI 8500.2, HIPAA, or PCI requirements)</li><li>Five (5) years of related work experience</li><li>Applicable certification or the ability to obtain it within 6 months; the Information Security Compliance and Assessment Specialist maps to the NICE Cybersecurity Workforce Framework role of Mission Assessment Specialist</li><li>Experience with NIST SP 800-53, Risk Management Framework (RMF), and security assessment tools</li><li>Demonstrated knowledge and/or experience with Operating System, Virtualization, and Networking technologies</li><li>Must be able to demonstrate specialized experience applying the principles, practices, and techniques used by information systems security personnel</li><li>Proficiency with Microsoft Office products (Word, Outlook, Excel, PowerPoint, and SharePoint)</li><li>Must have strong attention to detail</li><li>Effective verbal and written communication and presentation skills</li><li>Strong planning, organizational, and time management skills</li><li>Demonstrated initiative and ability to work independently, as well as strong interpersonal skills that foster the ability to work effectively on teams, communicate effectively </li></ul>Security Clearance Level <ul><li>Active Top Secret Clearance, SSBI (Single Scope Background Investigation) with the ability to upgrade to a Department of Energy (DOE) “Q” Clearance or an active DOE "Q" clearance </li></ul>Work Schedule <ul><li>Full-time on-site in Albuquerque NM </li></ul>Benefits Offered <ul><li>Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, 401(k) match, Tuition/Training Assistance, Parental Leave, Paid Time Off, and Holidays. </li></ul>Criterion Systems, LLC and its subsidiaries are committed to equal employment opportunity and non-discrimination at all levels of our organization. We believe in treating all applicants and employees fairly and make employment decisions without regard to any individual’s protected status race, ethnicity, color, national origin, ancestry, religion, creed, sex/gender, gender identity/gender expression, sexual orientation, physical and mental disability, marital/parental status, pregnancy (including childbirth, lactation, and related medical conditions), age, genetic information (including characteristics and testing), military and veteran status, or any other characteristic protected by law. For our complete EEO/AA and Pay Transparency statement, please visit https//careers-criterion-sys.icims.com/. <

START NEW SEARCH