Apogee Research, LLC

Security Engineer

• Provide comprehensive information systems security support, reporting to the Director of Operations
• Ensure users follow information security policies and DoD regulations to protect, operate, maintain, and dispose of systems and data
• Interpret, review, and maintain SSPs, SCTMs, Risk Assessment Reports, Security Control Assessment Reports, and authorizations
• Participate in assessments of classified and Controlled Unclassified Information networks
• Troubleshoot user accounts and network issues; perform backups and assist with Assured File Transfers
• Maintain security configuration integrity and remove decommissioned information systems
• Identify vulnerabilities and recommend or implement countermeasures for controlled and secure network resources
• Develop RMF packages, including SSPs, Enterprise Sub-System packages, Information Continuous Security Monitoring Plans, and Body of Evidence
• Coordinate authorization activities with Program Managers, the ISSM, and Government Customer Security Control Accessors
• Review and analyze system audit logs for anomalous activity and potential threats
• Conduct and monitor cyber awareness and information systems training
• Perform security audits on assigned systems
• Maintain current information systems documentation, including training records, user agreements, system baselines, and SSPs
• Coordinate with program stakeholders, ISSM, CPSO/FSO, IT Manager, and team members to maintain an acceptable security posture
• Support the ISSM in reporting, responding to, and investigating security violations and incidents
• Participate in incident response drills and change configuration boards
• Develop and maintain POA&Ms for security vulnerabilities and recommend remediation of required security controls

Information Systems Security Officer