Description
SAIC is seeking a Sr. Cybersecurity Specialist to support the US Air Force Agency for Modeling and Simulation (AFAMS) program as a Software Security Analyst, Orlando, FL.
Responsibilities include:
- Security Control Assessor Representative (SCAR)
- Support the Operational Training Infrastructure (OTI) and the Authorizing Official Designated Representative (AODR)
- Creation of a Software Assess-only process that satisfies RMF requirements
- Development, Security, Operations (DevSecOps) Engineer
- Develops procedures and methodologies for assessing Operational Training Infrastructure (OTI) software
- Performs Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST)
- Integrate DevSecOps into the Software Development Life Cycle (SDLC) of all Operational Training Infrastructure (OTI) development teams
- Information System Security Officer/Engineer/Manager (ISSO/ISSE/ISSM) and eMASS Administrator for the SERT Lab
- System/Server Administration
- Quarterly Security Technical Implementation Guide (STIG)/Security Content Automation Protocol (SCAP) management
- Conducts Assured Compliance Assessment Solution (ACAS) vulnerability scans
- Windows Server 2016, Windows 10, Red Hat Enterprise Linux (RHEL 6) management
- Network Administration including Juniper switch and Fortinet firewall management
- SharePoint Administration including creating and maintaining an Approved Products List on SharePoint for Operational Training Infrastructure (OTI) as well as inventory of software within the OTI boundary
Qualifications
TYPICAL EDUCATION AND EXPERIENCE: Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience ; PhD or JD and four (4) years or more experience. Or relevant years of experience in lieu of degree.
Required Skills:
· 5 years minimum experience in the fields of Cybersecurity
· Computer Programming, Scripting and/or Malware Analyst experience
· Risk Management Framework (RMF) Experience
Active TS/SCI
Desired Skills:
· Experience with static code analysis tools like Fortify and Coverity
· Experience with network monitoring tools like Wireshark and TCPDUMP
· Experience analyzing vulnerabilities
· Professional certifications such as CISSP and CSSLP
